Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rjcm-7v2p-9265

Опубликовано: 23 окт. 2025
Источник: github
Github: Прошло ревью
CVSS3: 4.3

Описание

Moodle course access permissions are not properly checked in course_output_fragment_course_overview

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

Пакеты

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 5.0.0-beta, < 5.0.3

5.0.3

EPSS

Процентиль: 9%
0.00032
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 2 месяцев назад

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

CVSS3: 4.3
nvd
около 2 месяцев назад

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to, potentially exposing limited course details.

CVSS3: 4.3
debian
около 2 месяцев назад

A flaw was found in the course overview output function where user acc ...

EPSS

Процентиль: 9%
0.00032
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-284