Lucene search

K
cvelistRedhatCVELIST:CVE-2021-40692
HistoryJan 21, 2022 - 6:17 p.m.

CVE-2021-40692

2022-01-2118:17:47
redhat
www.cve.org
4
capability checks
teacher downloads
cve-2021-40692

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

22.7%

Insufficient capability checks made it possible for teachers to download users outside of their courses.

CNA Affected

[
  {
    "product": "moodle",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "3.11 to 3.11.2, 3.10 to 3.10.6, 3.9 to 3.9.9 and earlier unsupported versions"
      }
    ]
  }
]

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

22.7%