by Michael Hawkins.
An arbitrary file read risk was identified in the backup restore functionality.
Severity/Risk: Serious
Versions affected: 5.2, 5.1 to 5.1.4, 5.0 to 5.0.7, 4.5 to 4.5.11 and earlier unsupported versions
Versions fixed: 5.2.1, 5.1.5, 5.0.8 and 4.5.12
Reported by: LoWeST
CVE identifier: Pending (this will be updated once available)
Changes (main): http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-88736
Tracker issue: MDL-88736 Arbitrary file read risk in backup restore