Описание
The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to bypass intended access restrictions and enter additional answer attempts by leveraging the student role.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 3.0.3+dfsg-0ubuntu1 |
| cosmic | not-affected | 3.0.3+dfsg-0ubuntu1 |
| devel | not-affected | 3.0.3+dfsg-0ubuntu1 |
| disco | not-affected | 3.0.3+dfsg-0ubuntu1 |
| esm-apps/bionic | not-affected | 3.0.3+dfsg-0ubuntu1 |
| esm-apps/xenial | not-affected | 3.0.3+dfsg-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
Показывать по
EPSS
5.5 Medium
CVSS2
5.4 Medium
CVSS3
Связанные уязвимости
The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to bypass intended access restrictions and enter additional answer attempts by leveraging the student role.
The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x ...
Moodle allows attackers to enter additional answer attempts
Уязвимость системы управления обучением Мoodle, позволяющая нарушителю обойти существующие ограничения доступа
EPSS
5.5 Medium
CVSS2
5.4 Medium
CVSS3