Lucene search
GitHub Advisory DatabaseGHSA-H9W8-4376-J344HistoryMay 01, 2022 - 7:23 a.m.
Moodle does not properly validate module instance id
2022-05-0107:23:24
CWE-20
GitHub Advisory Database
github.com
5
moodle
validation
instance id
course module
remote attack
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
Low
EPSS
0.003
Percentile
66.2%
Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.
Affected configurations
Node
moodlemoodleRange<1.6.2
Related
osv
osv
Moodle does not properly validate module instance id
2022-05-01 07:23:24
cvelist
cvelist
CVE-2006-4936
2006-09-23 00:00:00
cve
cve
CVE-2006-4936
2006-09-23 00:07:00
ubuntucve
ubuntucve
CVE-2006-4936
2006-09-23 00:00:00
nvd
nvd
CVE-2006-4936
2006-09-23 00:07:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
Low
EPSS
0.003
Percentile
66.2%
Related for GHSA-H9W8-4376-J344