{"id":"GHSA-cr78-rphw-w73p","aliases":["CVE-2012-6099"],"title":"Moodle Arbitrary File Read via Backup Functionality","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"The moodle1 backup converter in `backup/converter/moodle1/lib.php` in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.","severity":"medium","score":null,"published":"2022-05-13T01:12:55.000Z","modified":"2024-12-07T05:27:37.301Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-cr78-rphw-w73p","url":"https://osv.dev/vulnerability/GHSA-cr78-rphw-w73p"}],"ranges":[{"events":[{"introduced":"2.4"},{"fixed":"2.4.1"}],"type":"ECOSYSTEM"}],"versions":["2.4","v2.4.0","v2.4.0-rc1"],"fixed":["2.4.1"]},{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-cr78-rphw-w73p","url":"https://osv.dev/vulnerability/GHSA-cr78-rphw-w73p"}],"ranges":[{"events":[{"introduced":"2.3"},{"fixed":"2.3.4"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["2.3.4"]},{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-cr78-rphw-w73p","url":"https://osv.dev/vulnerability/GHSA-cr78-rphw-w73p"}],"ranges":[{"events":[{"introduced":"2.2"},{"fixed":"2.2.7"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["2.2.7"]},{"ecosystem":"Packagist","name":"moodle/moodle","sources":[{"name":"OSV · GHSA-cr78-rphw-w73p","url":"https://osv.dev/vulnerability/GHSA-cr78-rphw-w73p"}],"ranges":[{"events":[{"introduced":"2.1"},{"fixed":"2.1.10"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["2.1.10"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2012-6099","https://github.com/moodle/moodle/commit/0ab681d3e7bed2a37430387f9da8504c0b077d10","https://github.com/moodle/moodle/commit/7b66137f7bcc84fb5eb07f58fb658b21bf37cc44","https://github.com/moodle/moodle","https://moodle.org/mod/forum/discuss.php?d=220160","http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36977","http://openwall.com/lists/oss-security/2013/01/21/1"],"sources":[{"name":"OSV","id":"GHSA-cr78-rphw-w73p","modified":"2024-12-07T05:27:37.301539Z","url":"https://osv.dev/vulnerability/GHSA-cr78-rphw-w73p"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T18:20:33.032Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}