CVE-2019-3850

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17

Medium · published March 26, 2019

CVSS v3.0
4.3
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly (in the same window). Although links themselves may be valid, opening within the same window and without the no-referrer header policy made them more susceptible to exploits.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00947 · 60.8th percentile
Published
2019-03-26T17:46Z
EPSS history
Timeline
  • 26 MAR 17:46Z
    A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17
    cvelistv5