Lucene search

K
osvGoogleOSV:CVE-2019-14883
HistoryMar 18, 2020 - 1:15 p.m.

CVE-2019-14883

2020-03-1813:15:12
Google
osv.dev
5

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

32.6%

A vulnerability was found in Moodle 3.6 before 3.6.7 and 3.7 before 3.7.3, where tokens used to fetch inline atachments in email notifications were not disabled when a user’s account was no longer active. Note: to access files, a user would need to know the file path, and their token.

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

32.6%