Lucene search

K
osvGoogleOSV:GHSA-G96H-WVRM-C2WW
HistoryMay 13, 2022 - 1:12 a.m.

Moodle Improper Access Control

2022-05-1301:12:38
Google
osv.dev
8
moodle
improper access control
remote authenticated users

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

46.5%

The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to edit profile fields locked by the administrator.

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

46.5%