What is GHSA-3rqj-jchw-9cc7?

GHSA-3rqj-jchw-9cc7 is a security advisory published by GitHub Security Advisories with Medium severity. Moodle Authentication Bypass in Question-Bank

Which CVE IDs does GHSA-3rqj-jchw-9cc7 cover?

GHSA-3rqj-jchw-9cc7 covers the following CVE IDs: CVE-2012-2356. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-3rqj-jchw-9cc7?

GHSA-3rqj-jchw-9cc7 affects 2 products, including: composer/moodle/moodle:\u003e= 2.1, \u003c 2.1.6; composer/moodle/moodle:\u003e= 2.2, \u003c 2.2.3.

GHSA-3rqj-jchw-9cc7Medium

Moodle Authentication Bypass in Question-Bank

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

January 12, 2024

🔗 CVE IDs covered (1)

CVE-2012-2356 →

📋 Description

The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a save_question action.

🎯 Affected products2

composer/moodle/moodle:>= 2.1, < 2.1.6
composer/moodle/moodle:>= 2.2, < 2.2.3

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2012-2356
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-32239
http://openwall.com/lists/oss-security/2012/05/23/2
https://github.com/moodle/moodle/commit/0f83dd10a1d013e77906c7be4560126bb14c6b5c
https://github.com/moodle/moodle/commit/29e247e44e983f230f248192ffac8e7b7abe37fd
https://github.com/moodle/moodle/commit/51c5e6057c67687f5d872f8a228cfea275abf576
https://github.com/advisories/GHSA-3rqj-jchw-9cc7