Threats tagged 'bit-moodle-2024-34003'

CVE-2024-34003 is a medium severity vulnerability in Moodle affecting certain versions prior to 4.1.10, between 4.2.0 and 4.2.7, and between 4.3.0 and 4.3.4. It allows an authenticated Moodle user with permissions to restore workshop modules and direct web server access outside the Moodle webroot in a misconfigured shared hosting environment to perform a local file inclusion (LFI). This vulnerability arises only if the hosting environment is misconfigured to permit access to other users' content. A patch is available to address this issue.