CVE-2018-1000535

lms version

Original description

The description as published by the source.

lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

report 0dd.zone
report github.com