Lucene search

K
cvelistRedhatCVELIST:CVE-2019-3808
HistoryMar 25, 2019 - 5:28 p.m.

CVE-2019-3808

2019-03-2517:28:32
CWE-79
redhat
raw.githubusercontent.com
2

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The ‘manage groups’ capability did not have the ‘XSS risk’ flag assigned to it, but does have that access in certain places. Note that the capability is intended for use by trusted users, and is only assigned to teachers and managers by default.

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%