← All advisories

Medium severity6.5NVD Advisory· Published Jan 22, 2018· Updated Jun 17, 2026

CVE-2018-1042

CVE-2018-1042

Description

Moodle 3.x has Server Side Request Forgery in the filepicker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
moodle/moodlePackagist	>= 3.4, < 3.4.1	3.4.1
moodle/moodlePackagist	>= 3.3, < 3.3.4	3.3.4
moodle/moodlePackagist	>= 3.2, < 3.2.7	3.2.7
moodle/moodlePackagist	>= 3.1, < 3.1.10	3.1.10

Affected products

1

ghsa-coords
pkg:composer/moodle/moodle
Range: >= 3.4, < 3.4.1

Patches

Vulnerability mechanics

References

7

www.securityfocus.com/bid/102752nvdThird Party AdvisoryVDB Entry
github.com/advisories/GHSA-qqjv-mc2v-p7mcghsaADVISORY
moodle.org/mod/forum/discuss.phpnvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2018-1042ghsaADVISORY
packetstormsecurity.com/files/153766/Moodle-Filepicker-3.5.2-Server-Side-Request-Forgery.htmlnvdWEB
github.com/moodle/moodle/commit/f1d1a60e0ac8549c08e66062f3cd0110e4a92e24ghsaWEB
web.archive.org/web/20210124134113/http://www.securityfocus.com/bid/102752ghsaWEB

News mentions

0

No linked articles in our index yet.