Veracode Vulnerability DatabaseVERACODE:46151Authorization Bypass
3.5 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
moodle/moodle is vulnerable to Authorization Bypass. The vulnerability is due to insufficient permission checks, which allow unauthorized users to add comments to the comments block on another user’s dashboard when it is not otherwise available.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | v4.1.8 | |
| moodle/moodle | le | v4.2.5 | |
| moodle/moodle | le | v4.3.2 | |
| moodle/moodle | le | v4.1.8 | |
| moodle/moodle | le | v4.2.5 | |
| moodle/moodle | le | v4.3.2 |
Related
3.5 Low
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%