GHSA-g96h-wvrm-c2wwMediumCVSS 6.5

Moodle Improper Access Control

Published
May 13, 2022
Last Modified
April 23, 2024

🔗 CVE IDs covered (1)

CVE-2016-3729 →

📋 Description

The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to edit profile fields locked by the administrator.

🎯 Affected products4

  • composer/moodle/moodle:>= 3.0, < 3.0.3
  • composer/moodle/moodle:>= 2.9, < 2.9.6
  • composer/moodle/moodle:>= 2.8, < 2.8.12
  • composer/moodle/moodle:>= 2.7, < 2.7.14

🔗 References (5)