CVE-2019-3849CWE-285

A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8

Medium · published March 26, 2019

CVSS v3.0
6.3
EPSS
1%
Percentile
63.2
In the wild
Unconfirmed
What it is

A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Users could assign themselves an escalated role within courses or content accessed via LTI, by modifying the request to the LTI publisher site.

The record
Technical detail
CVSS v3.0
6.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01023 · 63.2th percentile
Weakness
CWE-285 · Improper Authorization
Published
2019-03-26T17:46Z
EPSS history
Timeline
  • 26 MAR 17:46Z
    A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8
    cvelistv5