GHSA-p9hr-f4xj-8w8r
GitHub Security Advisory
Moodle included private user files in course backups
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Moodle before 2.2.2 is vulnerable to information disclosure because course backups were including users' private files.
Affected Packages
Packagist
moodle/moodle
Affected versions:
2.2
(fixed in 2.2.2)
Packagist
moodle/moodle
Affected versions:
2.1
(fixed in 2.1.5)
Packagist
moodle/moodle
Affected versions:
2.0
(fixed in 2.0.8)
Packagist
moodle/moodle
Affected versions:
0
(fixed in 1.9.17)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 14, 2025 6:31 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.