What is GHSA-qh8m-6g4p-33h3?

GHSA-qh8m-6g4p-33h3 is a security advisory published by GitHub Security Advisories with High severity. Moodle Improper Authentication

Which CVE IDs does GHSA-qh8m-6g4p-33h3 cover?

GHSA-qh8m-6g4p-33h3 covers the following CVE IDs: CVE-2018-1082. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qh8m-6g4p-33h3?

GHSA-qh8m-6g4p-33h3 has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

Which products are affected by GHSA-qh8m-6g4p-33h3?

GHSA-qh8m-6g4p-33h3 affects 2 products, including: composer/moodle/moodle:\u003e= 3.3, \u003c 3.3.5; composer/moodle/moodle:\u003e= 3.4, \u003c 3.4.2.

GHSA-qh8m-6g4p-33h3HighCVSS 8.1

Moodle Improper Authentication

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

April 23, 2024

🔗 CVE IDs covered (1)

CVE-2018-1082 →

📋 Description

A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once confirmed but later suspended, the user could still login to the site.

🎯 Affected products2

composer/moodle/moodle:>= 3.3, < 3.3.5
composer/moodle/moodle:>= 3.4, < 3.4.2

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-1082
https://moodle.org/mod/forum/discuss.php?d=367939
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-60101
http://www.securityfocus.com/bid/103725
https://github.com/advisories/GHSA-qh8m-6g4p-33h3