Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rjcm-7v2p-9265

Опубликовано: 23 окт. 2025
Источник: github
Github: Прошло ревью
CVSS3: 4.3

Описание

Moodle course access permissions are not properly checked in course_output_fragment_course_overview

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

Пакеты

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 5.0.0-beta, < 5.0.3

5.0.3

EPSS

Процентиль: 11%
0.00037
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 4.3
ubuntu
3 месяца назад

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

CVSS3: 4.3
nvd
3 месяца назад

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

CVSS3: 4.3
debian
3 месяца назад

A flaw was found in the course overview output function where user acc ...

EPSS

Процентиль: 11%
0.00037
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-284