CVE 2016-8642

In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.

See the

CVE page on Mitre.org for more details.

References