CVE-2019-3851

A vulnerability was found in moodle before versions 3.6.3 and 3.5.5

Medium · published March 26, 2019

CVSS v3.0
4.3
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

A vulnerability was found in moodle before versions 3.6.3 and 3.5.5. There was a link to site home within the the Boost theme's secure layout, meaning students could navigate out of the page.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00883 · 58.8th percentile
Published
2019-03-26T17:46Z
EPSS history
Timeline
  • 26 MAR 17:46Z
    A vulnerability was found in moodle before versions 3.6.3 and 3.5.5
    cvelistv5