GHSA-ww45-x87c-wgffHighCVSS 7.5

Moodle all messaging conversations could be viewed

Published
May 24, 2022
Last Modified
January 26, 2024

🔗 CVE IDs covered (1)

CVE-2019-10154 →

📋 Description

A flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restricted to the current user's conversations.

🎯 Affected products1

  • composer/moodle/moodle:>= 3.6, < 3.6.4

🔗 References (6)