GHSA-x7r4-26m9-hmgq
Suggest an improvement- Source
- https://github.com/advisories/GHSA-x7r4-26m9-hmgq
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-x7r4-26m9-hmgq/GHSA-x7r4-26m9-hmgq.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-x7r4-26m9-hmgq
- Aliases
-
- CVE-2008-5153
- Published
- 2022-05-17T02:18:02Z
- Modified
- 2024-02-09T19:12:29Z
- Summary
- Moodle vulnerable to symlink attack
- Details
-
spell-check-logic.cgiin Moodle 1.9 before 1.9.4, 1.8 before 1.8.8, 1.7 before 1.7.7 and 1.6 before 1.6.9 allows local users to overwrite arbitrary files via a symlink attack on the (1)/tmp/spell-check-debug.log, (2)/tmp/spell-check-before, or (3)/tmp/spell-check-aftertemporary file. - Database specific
{ "cwe_ids": [ "CWE-59" ], "github_reviewed": true, "github_reviewed_at": "2024-02-09T18:57:15Z", "nvd_published_at": "2008-11-18T16:00:00Z", "severity": "MODERATE" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2008-5153
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46708
- https://github.com/moodle/moodle
- https://web.archive.org/web/20090821033319/http://secunia.com/advisories/33955
- https://web.archive.org/web/20110511083352/http://uvw.ru/report.sid.txt
- https://web.archive.org/web/20141121115305/http://www.securityfocus.com/bid/32402
- http://lists.debian.org/debian-devel/2008/08/msg00347.html
- http://www.debian.org/security/2009/dsa-1724
Affected packages
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle