Threats tagged 'bit-moodle-2024-34005'

CVE-2024-34005 is a medium severity vulnerability affecting Moodle in certain misconfigured shared hosting environments. It allows an authenticated Moodle user with permissions to restore database activity modules and direct web server access outside the Moodle webroot to perform a local file inclusion (LFI) attack. This issue arises only if the hosting environment improperly permits access to other users' content. A patch is available to address this vulnerability.