Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4353
HistoryJun 02, 2017 - 6:43 a.m.

Access Restriction Bypass

2017-06-0206:43:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.002

Percentile

52.1%

Moodle is vulnerable to access restriction bypass. The vulnerability exists because course/reset.php checks an update capability instead of a reset capability, allowing authenticated users to bypass the access restriction through a reset operation.

EPSS

0.002

Percentile

52.1%