Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4318
HistoryMay 29, 2017 - 7:16 a.m.

Privilege Escalation

2017-05-2907:16:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.001 Low

EPSS

Percentile

46.8%

Moodle is vulnerable to privilege escalation attacks. The attacks are possible due to a flaw in the self-enrollment functionality. The flaw allows an authenticated user to leverage a role from teacher to manager level without authorization.

CPENameOperatorVersion
moodle/moodlele2.2.0
moodle/moodlele2.1.3

0.001 Low

EPSS

Percentile

46.8%