CVE-2015-5265

The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not consider the mod/wiki:managefiles…

published February 22, 2016

CVSS
—
EPSS
2%
Percentile
74.0
In the wild
Unconfirmed
What it is

The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not consider the mod/wiki:managefiles capability before authorizing file management, which allows remote authenticated users to delete arbitrary files by using a manage-files button in a text editor.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01504 · 74.0th percentile
Published
2016-02-22T02:00Z
EPSS history
Timeline
  • 22 FEB 02:00Z
    The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not consider the mod/wiki:managefiles…
    cvelistv5