CVE-2020-1692

2020-02-1716:15:28

Google

osv.dev

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

22.1%

JSON

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.

CPENameOperatorVersion
moodleeq2.7.0-rc1
moodleeq1.0.2
moodleeq3.1.0-rc1
moodleeq3.2.0-rc5
moodleeq2.4.0
moodleeq2.8.0-beta
moodleeq2.2.0-rc1
moodleeq2.3.0-rc1
moodleeq1.2.1
moodleeq3.7.0-rc1

Name	Operator	Version
moodle	eq	2.7.0-rc1
moodle	eq	1.0.2
moodle	eq	3.1.0-rc1
moodle	eq	3.2.0-rc5
moodle	eq	2.4.0
moodle	eq	2.8.0-beta
moodle	eq	2.2.0-rc1
moodle	eq	2.3.0-rc1
moodle	eq	1.2.1
moodle	eq	3.7.0-rc1