CVE-2012-2358

Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity's read-only state and modify the…

published July 21, 2012

CVSS
—
EPSS
2%
Percentile
75.2
In the wild
Unconfirmed
What it is

Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity's read-only state and modify the database by leveraging the student role and editing database activity entries that already exist.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01585 · 75.2th percentile
Published
2012-07-21T01:00Z
EPSS history
Timeline
  • 21 JUL 01:00Z
    Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity's read-only state and modify the…
    cvelistv5