NVD

Id
24356  
Name
CVE-2015-2267  
Description
mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-06-01  
Modified Date
2015-06-02  
Seq
2015-2267  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128892 24356 CVE-2015-2267 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-49087  View
128893 24356 CVE-2015-2267 [oss-security] 20150316 Moodle security issues are now public  View
128894 24356 CVE-2015-2267 https://moodle.org/mod/forum/discuss.php?d=307381  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7581 JVNDB-2015-002901 Moodle の mdeploy.php におけるアクセス制限を回避される脆弱性 Moodle の mdeploy.php には、アクセス制限を回避され、任意のディレクトリにアーカイブを展開される脆弱性が存在します。 CVE-2015-2267 79492 CVE-2015-2267 24356 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002901.html 2015-03-16 2015-06-04 View