CVE-2020-14321CWE-863
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course
published August 16, 2022
What it is
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.16243 · 96.9th percentile
- Weakness
- CWE-863 · Incorrect Authorization
- Published
- 2022-08-16T00:00Z
EPSS history
Timeline
16 AUG 00:00Z
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course
cvelistv5