GHSA-5cx4-w4fh-fr57HighCVSS 7.5
Moodle Affected by Improper Restriction of Excessive Authentication Attempts
🔗 CVE IDs covered (1)
📋 Description
A flaw was found in Moodle. A remote attacker could exploit a lack of proper rate limiting in the confirmation email service. This vulnerability allows attackers to more easily enumerate or guess user credentials, facilitating brute-force attacks against user accounts.
🎯 Affected products5
- composer/moodle/moodle:< 4.1.22
- composer/moodle/moodle:>= 4.4.0-beta, < 4.4.12
- composer/moodle/moodle:>= 4.5.0-beta, < 4.5.8
- composer/moodle/moodle:>= 5.0.0-beta, < 5.0.4
- composer/moodle/moodle:>= 5.1.0-beta, < 5.1.1