CVE-2018-1082

2018-03-2600:00:00

CWE-285

redhat

www.cve.org

6.4 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

JSON

A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once confirmed but later suspended, the user could still login to the site.

CNA Affected

[
  {
    "product": "Moodle",
    "vendor": "Red Hat, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "3.4 to 3.4.1, 3.3 to 3.3.4"
      }
    ]
  }
]