Moodle backs up private files
High severity
GitHub Reviewed
Published
Apr 23, 2022
to the GitHub Advisory Database
•
Updated Aug 29, 2023
Package
Affected versions
>= 2.2, <= 2.2.1
>= 2.1, <= 2.1.4
>= 2.0, <= 2.0.7
Patched versions
2.2.2
2.1.5
2.0.8
Description
Published by the National Vulnerability Database
Nov 14, 2019
Published to the GitHub Advisory Database
Apr 23, 2022
Reviewed
Aug 29, 2023
Last updated
Aug 29, 2023
Moodle before 2.2.2, 2.1.5, and 2.0.8 had users' private files included in course backups unnecessarily.
References