The Moodle Project Moodle
5 CVEs affecting The Moodle Project Moodle. Latest disclosed: 2020-02-17. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10186 | High | 8.8 | 2019-07-31 | A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey (CSRF) token was not being utilised by the XML loading/unloading admin tool. |
CVE-2020-1692 | High | 8.1 | 2020-02-17 | Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course. |
CVE-2019-10189 | Medium | 4.3 | 2019-07-31 | A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assig… |
CVE-2019-10188 | Medium | 4.3 | 2019-07-31 | A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in a quiz group could modify group overrides for other groups in the same quiz. |
CVE-2019-10187 | Medium | 4.3 | 2019-07-31 | A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other… |