Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fqcg-5c9f-c55v

Опубликовано: 30 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessment scores.

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessment scores.

EPSS

Процентиль: 10%
0.00201
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-425

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 1 месяца назад

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessment scores.

CVSS3: 4.3
nvd
около 1 месяца назад

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessment scores.

CVSS3: 4.3
debian
около 1 месяца назад

A flaw was found in Moodle. Due to a missing capability check, a low-p ...

CVSS3: 8.8
altlinux
3 месяца назад

ALT-PU-2026-12636: package `moodle` update to version 5.2.2-alt1

EPSS

Процентиль: 10%
0.00201
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-425