CVE-2012-5479: Medium severity moodle vulnerability
Published Nov 21, 2012
·Updated
The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback.
Affected Software
18 affected components
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Moodle moodle=2.1.2
Moodle moodle=2.1.3
Moodle moodle=2.1.4
Moodle moodle=2.1.5
Moodle moodle=2.1.6
Moodle moodle=2.1.7
Moodle moodle=2.1.8
Moodle moodle=2.2.0
Moodle moodle=2.2.1
Moodle moodle=2.2.2
Moodle moodle=2.2.3
Moodle moodle=2.2.4
Moodle moodle=2.2.5
Moodle moodle=2.3.0
Moodle moodle=2.3.1
Moodle moodle=2.3.2
Event History
Nov 21, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5479?
CVE-2012-5479 is rated as having a medium severity due to its potential for remote file execution by authenticated users.
2
How do I fix CVE-2012-5479?
To fix CVE-2012-5479, upgrade your Moodle installation to version 2.1.9, 2.2.6, or 2.3.3 or later.
3
Which versions of Moodle are affected by CVE-2012-5479?
CVE-2012-5479 affects Moodle versions 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3.
4
What kind of vulnerability is CVE-2012-5479?
CVE-2012-5479 is a file upload vulnerability that allows remote authenticated users to execute files.
5
What can happen if CVE-2012-5479 is exploited?
If CVE-2012-5479 is exploited, it can lead to unauthorized remote execution of files on the vulnerable Moodle server.