← All advisories

High severity7.5NVD Advisory· Published Nov 14, 2019· Updated Jun 16, 2026

CVE-2012-1156

CVE-2012-1156

Description

Moodle before 2.2.2 has users' private files included in course backups

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
moodle/moodlePackagist	>= 2.2, < 2.2.2	2.2.2
moodle/moodlePackagist	>= 2.1, < 2.1.5	2.1.5
moodle/moodlePackagist	>= 2.0, < 2.0.8	2.0.8

Affected products

7

Moodle/Moodle2 versions
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*range: <2.2.2
- (no CPE)range: 2.2 to 2.2.1+
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:15:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:16:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
ghsa-coords
pkg:composer/moodle/moodle
Range: >= 2.2, < 2.2.2

Patches

Vulnerability mechanics

References

17

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party AdvisoryWEB
moodle.org/mod/forum/discuss.phpnvdPatchVendor AdvisoryWEB
lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.htmlnvdMailing ListThird Party AdvisoryWEB
lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.htmlnvdMailing ListThird Party AdvisoryWEB
lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.htmlnvdMailing ListThird Party AdvisoryWEB
lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.htmlnvdMailing ListThird Party AdvisoryWEB
lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.htmlnvdMailing ListThird Party AdvisoryWEB
github.com/advisories/GHSA-358r-g2xw-7c83ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2012-1156ghsaADVISORY
security-tracker.debian.org/tracker/CVE-2012-1156nvdThird Party AdvisoryWEB
docs.moodle.org/dev/Moodle_2.0.8_release_notesghsaWEB
docs.moodle.org/dev/Moodle_2.1.5_release_notesghsaWEB
docs.moodle.org/dev/Moodle_2.2.2_release_notesghsaWEB
access.redhat.com/security/cve/cve-2012-1156nvdBroken LinkWEB
github.com/moodle/moodle/commit/37b6e7a03c77ea99fbe5224a15419e318019c570ghsaWEB
github.com/moodle/moodle/commit/ac6dc09c261219afa0191e9f2daf030bd071d272ghsaWEB
github.com/moodle/moodle/commit/f88224624dca76e1a8a2810fd8cc04292611f91cghsaWEB

News mentions

0

No linked articles in our index yet.