CVE-2020-1692CWE-352

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course

High · published February 17, 2020

CVSS v3.1
8.1
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00641 · 50.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2020-02-17T15:38Z
EPSS history
Timeline
  • 17 FEB 15:38Z
    Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course
    cvelistv5