Lucene search
+L

1 matches found

OSV
OSV
added 2016/01/20 5:53 p.m.6 views

MGASA-2016-0029 Updated moodle packages fix security vulnerability

In Moodle before 2.8.10, web services coreenrolgetcourseenrolmentmethods and enrolselfgetinstanceinfo did not check user permission to access hidden courses CVE-2016-0724. In Moodle before 2.8.10, search string in course management interface was not escaped when being output creating potential fo...

6.1CVSS4.6AI score0.0194EPSS
SaveExploits0References6
Rows per page
Query Builder