Lucene search

K
cvelistRedhatCVELIST:CVE-2015-3273
HistoryFeb 22, 2016 - 2:00 a.m.

CVE-2015-3273

2016-02-2202:00:00
redhat
www.cve.org
5

AI Score

5.3

Confidence

High

EPSS

0.002

Percentile

51.8%

mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing “Post a copy to all groups” actions, which allows remote authenticated users to bypass intended access restrictions by leveraging per-group authorization.

AI Score

5.3

Confidence

High

EPSS

0.002

Percentile

51.8%