Описание
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| moodle | removed | package |
Примечания
https://moodle.org/mod/forum/discuss.php?d=352354
EPSS
Процентиль: 59%
0.00977
Низкий
Связанные уязвимости
CVSS3: 5.3
ubuntu
около 9 лет назад
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.
CVSS3: 5.3
nvd
около 9 лет назад
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.
CVSS3: 5.3
github
около 4 лет назад
Moodle Unauthorized searching of arbitrary blogs by typing full url
EPSS
Процентиль: 59%
0.00977
Низкий