Lucene search
CVE-2020-25699
Insufficient capability checks in Moodle allow unauthorized users to add capabilities to roles. Versions affected: 3.5 to 3.9.2. Fixed in Moodle 3.5.15, 3.7.9, 3.8.6, and 3.9.3
Show more
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | CVE-2020-25699 | 19 Nov 202017:15 | – | nvd |
 | Privilage Escalation in moodle | 29 Mar 202120:43 | – | github |
 | Privilage Escalation in moodle | 29 Mar 202120:43 | – | osv |
| BIT-moodle-2020-25699 | 6 Mar 202411:11 | – | osv |
| CVE-2020-25699 | 19 Nov 202017:15 | – | osv |
 | CVE-2020-25699 | 19 Nov 202000:00 | – | cvelist |
 | Design/Logic Flaw | 19 Nov 202017:15 | – | prion |
 | Privilege Escalation | 20 Nov 202005:50 | – | veracode |
 | CVE-2020-25699 | 19 Nov 202000:00 | – | ubuntucve |
 | Moodle < 3.5.14, 3.7.x < 3.7.9, 3.8.x < 3.8.6, 3.9.x < 3.9.3 Multiple Vulnerabilities | 27 Nov 202000:00 | – | openvas |
10
[
{
"vendor": "n/a",
"product": "moodle",
"versions": [
{
"version": "Fixed in 3.9.3",
"status": "affected"
},
{
"version": "Fixed in 3.8.6",
"status": "affected"
},
{
"version": "Fixed in 3.7.9",
"status": "affected"
},
{
"version": "Fixed in 3.5.15",
"status": "affected"
},
{
"version": "Fixed in 3.10",
"status": "affected"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo19 Nov 2020 17:15Current
7High risk
Vulners AI Score7
CVSS25
CVSS37.5
EPSS0.00344