CVE-2015-5342

MEDIUM

Moodle <2.6.11, <2.7.11, <2.8.9, <2.9.3 - Auth Bypass

Title source: llm
STIX 2.1

Description

The choice module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote authenticated users to bypass intended access restrictions by visiting a URL to add or delete responses in the closed state.

References (2)

Core 2

Scores

CVSS v3 4.3
EPSS 0.0018
EPSS Percentile 39.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

CWE
CWE-264
Status published
Products (25)
moodle/moodle 2.7.0
moodle/moodle 2.7.1
moodle/moodle 2.7.2
moodle/moodle 2.7.3
moodle/moodle 2.7.4
moodle/moodle 2.7.5
moodle/moodle 2.7.6
moodle/moodle 2.7.7
moodle/moodle 2.7.8
moodle/moodle 2.7.9
... and 15 more
Published Feb 22, 2016
Tracked Since Feb 18, 2026