Lucene search

K
osvGoogleOSV:GHSA-72GV-QQRP-H9QG
HistoryMay 13, 2022 - 1:13 a.m.

Moodle Users Can Bypass Deleted Status

2022-05-1301:13:04
Google
osv.dev
11

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.4%

The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token.

6.3 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.4%