Lucene search
GoogleOSV:CVE-2019-3848HistoryMar 26, 2019 - 6:29 p.m.
CVE-2019-3848
2019-03-2618:29:00
Google
osv.dev
9
A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Permissions were not correctly checked before loading event information into the calendar’s edit event modal popup, so logged in non-guest users could view unauthorised calendar events. (Note: It was read-only access, users could not edit the events.)
Related
ubuntucve
ubuntucve
CVE-2019-3848
2019-03-26 00:00:00
prion
prion
Design/Logic Flaw
2019-03-26 18:29:00
github
github
Moodle Logged in users could view all calendar events
2022-05-13 01:05:22
cvelist
cvelist
CVE-2019-3848
2019-03-26 00:00:00
cve
cve
CVE-2019-3848
2019-03-26 18:29:00
nvd
nvd
CVE-2019-3848
2019-03-26 18:29:00
veracode
veracode
Information Disclosure
2019-03-27 06:58:03
osv
osv
Moodle Logged in users could view all calendar events
2022-05-13 01:05:22
openvas
openvas