Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4344
HistoryJun 01, 2017 - 5:31 a.m.

Bypass Access Restrictions

2017-06-0105:31:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

EPSS

0.004

Percentile

72.7%

Moodle is vulnerable to access restrictions being bypassed. Authenticated users can leverage the student role to bypass access restrictions and read the RSS feed for a forum. This is possible because mod/forum/rsslib.php does not correctly implement the requirement for posting before reading a Q&A; forum.

EPSS

0.004

Percentile

72.7%