CVE-2020-25698CWE-284

Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course

published November 19, 2020

CVSS
—
EPSS
2%
Percentile
79.7
In the wild
Unconfirmed
What it is

Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course. This could lead to them unenrolling users without having permission to do so. Versions affected: 3.5 to 3.5.14, 3.7 to 3.7.8, 3.8 to 3.8.5, 3.9 to 3.9.2 and earlier unsupported versions. Fixed in 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01918 · 79.7th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-11-19T16:05Z
EPSS history
Timeline
  • 19 NOV 16:05Z
    Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course
    cvelistv5