Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4696
HistoryJul 26, 2017 - 7:36 a.m.

Bypass Intended Due-date Restrictions

2017-07-2607:36:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.002

Percentile

51.8%

Moodle is vulnerable to bypassing intended due-date restrictions. The vulnerability exists because save_submission() function in mod/assign/externallib.php fails to check due dates, allowing the students to add assignment beyond due dates.