Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q5m8-g27f-797h

Опубликовано: 06 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.

EPSS

Процентиль: 52%
0.00675
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-284
CWE-732

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 4 лет назад

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.

CVSS3: 4.3
nvd
больше 4 лет назад

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.

CVSS3: 4.3
debian
больше 4 лет назад

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the gra ...

CVSS3: 7.2
altlinux
больше 6 лет назад

ALT-PU-2020-1443: package `moodle` update to version 3.8.2-alt1

EPSS

Процентиль: 52%
0.00675
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-284
CWE-732