Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Moodle | Moodle | 3.9.0 (excluding) | 3.9.20 (excluding) |
| Moodle | Moodle | 3.11.0 (excluding) | 3.11.13 (excluding) |
| Moodle | Moodle | 4.0.0 (excluding) | 4.0.7 (excluding) |
| Moodle | Moodle | 3.9.0 (including) | 3.9.0 (including) |
| Moodle | Moodle | 3.11.0 (including) | 3.11.0 (including) |
| Moodle | Moodle | 4.0.0 (including) | 4.0.0 (including) |
| Moodle | Moodle | 4.1.0 (including) | 4.1.0 (including) |
| Moodle | Moodle | 4.1.1 (including) | 4.1.1 (including) |
| Moodle | Ubuntu | bionic | * |
| Moodle | Ubuntu | trusty | * |
| Moodle | Ubuntu | xenial | * |