MSA-11-0052: Potential to exploit developer debugging scripts

MSA-11-0052: Potential to exploit developer debugging scripts

by Michael de Raadt -
Number of replies: 0
Topic: print_object in datalib.php should have some validation to make sure it's not exploited
Severity: Minor
Versions affected: 2.1 to 2.1.2+, 2.0 to 2.0.5+ (1.9.x not affected)
Reported by: Rajesh Taneja
Issue no.: MDL-28947
Changes (master): http://git.moodle.org/gw?p=moodle.git;a=commit;h=187672608ec96659e07f2461b3b83634debd16cb
Workaround: Avoid leaving debugging code behind

Description:

Developers debugging a system may output object states, and the filtering of this output has now been strengthened.