Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-57f5-xvgq-p2v3

Опубликовано: 30 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 2.7

Описание

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI image generation functionality.

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI image generation functionality.

EPSS

Процентиль: 15%
0.00241
Низкий

2.7 Low

CVSS3

Дефекты

CWE-425

Связанные уязвимости

CVSS3: 2.7
ubuntu
около 1 месяца назад

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI image generation functionality.

CVSS3: 2.7
nvd
около 1 месяца назад

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI image generation functionality.

CVSS3: 2.7
debian
около 1 месяца назад

A flaw was found in Moodle. An incorrect capability check in the artif ...

CVSS3: 8.8
altlinux
3 месяца назад

ALT-PU-2026-12636: package `moodle` update to version 5.2.2-alt1

EPSS

Процентиль: 15%
0.00241
Низкий

2.7 Low

CVSS3

Дефекты

CWE-425