Description
In Moodle 3.x, course creators are able to change system default settings for courses.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/99617
Patch, Vendor Advisory x_refsource_confirm
https://moodle.org/mod/forum/discuss.php?d=355556
Scores
CVSS v3
6.5
EPSS
0.0009
EPSS Percentile
26.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Details
CWE
CWE-269
Status
published
Products (14)
moodle/moodle
3.1.0 (4 CPE variants)
moodle/moodle
3.1.1
moodle/moodle
3.1.2
moodle/moodle
3.1.3
moodle/moodle
3.1.4
moodle/moodle
3.1.5
moodle/moodle
3.1.6
moodle/moodle
3.2.0 (7 CPE variants)
moodle/moodle
3.2.1
moodle/moodle
3.2.2
... and 4 more
Published
Jul 17, 2017
Tracked Since
Feb 18, 2026