Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2mg9-hv69-897x

Опубликовано: 24 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 4.3

Описание

Moodle Ability to delete glossary entries that belong to another glossary

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.

Пакеты

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 3.7, < 3.7.1

3.7.1

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 3.6, < 3.6.5

3.6.5

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 3.5, < 3.5.7

3.5.7

EPSS

Процентиль: 39%
0.00167
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-284
CWE-862

Связанные уязвимости

CVSS3: 4.3
ubuntu
почти 6 лет назад

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.

CVSS3: 4.3
nvd
почти 6 лет назад

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.

CVSS3: 4.3
debian
почти 6 лет назад

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users ...

EPSS

Процентиль: 39%
0.00167
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-284
CWE-862