Back to feed
EUVD-2022-4318 · Published May 24, 2022
Moodle Private files uploaded via incoming mail processing could bypass quota restrictions A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their quota allowance could be exceeded.
Technologies
Moodle Moodle
Weaknesses
CWE-20
CVSS scores
- v3.04.2
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
