CVE-2016-8642 (moodle)

CVE-2016-8642 (moodle)

In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.

Source: CVE-2016-8642 (moodle)