BIT-moodle-2020-25701

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/moodle/BIT-moodle-2020-25701.json
JSON Data
https://api.test.osv.dev/v1/vulns/BIT-moodle-2020-25701
Aliases
Published
2024-03-06T11:11:31.978Z
Modified
2024-03-06T11:25:28.861Z
Summary
[none]
Details

If the upload course tool in Moodle was used to delete an enrollment method which did not exist or was not already enabled, the tool would erroneously enable that enrollment method. This could lead to unintended users gaining access to the course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.

Database specific
{
    "cpes": [
        "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}
References

Affected packages

Bitnami / moodle

Package

Name
moodle
Purl
pkg:bitnami/moodle

Severity

  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
3.5.0
Fixed
3.5.14
Introduced
3.7.0
Fixed
3.7.8
Introduced
3.8.0
Fixed
3.8.5
Introduced
3.9.0
Fixed
3.9.2