If Moodle's upload course tool is used to delete a non-existing enrollment method, it could enable unauthorized access to the course. Affects versions 3.5 to 3.9.2
Reporter | Title | Published | Views | Family All 17 |
---|---|---|---|---|
![]() | Privilege Escalation | 20 Nov 202003:33 | – | veracode |
![]() | Privilage Escalation in moodle | 29 Mar 202120:42 | – | osv |
![]() | BIT-moodle-2020-25701 | 6 Mar 202411:11 | – | osv |
![]() | CVE-2020-25701 | 19 Nov 202017:15 | – | osv |
![]() | CVE-2020-25701 | 19 Nov 202000:00 | – | ubuntucve |
![]() | Design/Logic Flaw | 19 Nov 202017:15 | – | prion |
![]() | CVE-2020-25701 | 19 Nov 202016:10 | – | cvelist |
![]() | CVE-2020-25701 | 19 Nov 202017:15 | – | nvd |
![]() | Moodle Access Control Error Vulnerability | 25 Nov 202000:00 | – | cnvd |
![]() | Privilage Escalation in moodle | 29 Mar 202120:42 | – | github |
[
{
"product": "moodle",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Fixed in 3.9.3"
},
{
"status": "affected",
"version": "Fixed in 3.8.6"
},
{
"status": "affected",
"version": "Fixed in 3.7.9"
},
{
"status": "affected",
"version": "Fixed in 3.5.15"
},
{
"status": "affected",
"version": "Fixed in 3.10"
}
]
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo