Lucene search

K
osvGoogleOSV:GHSA-G39C-MCCF-RXJV
HistoryMay 24, 2022 - 7:21 p.m.

Moodle Insecure direct object reference (IDOR) in a calendar web service

2022-05-2419:21:10
Google
osv.dev
6

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.6%

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users’ calendar action events.

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.6%