Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4347
HistoryJun 01, 2017 - 6:16 a.m.

Access Restriction Bypass

2017-06-0106:16:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.004

Percentile

72.7%

Moodle is vulnerable to access restriction bypasses. Authenticated users are able to bypass restrictions by selecting an activity that is configured for a group of other users. They are able to do this because lib/modinfolib.php does not check for a group-membership requirement when deciding what activities are unavailable or hidden.

EPSS

0.004

Percentile

72.7%