CVE-2020-25699CWE-863

In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course

published November 19, 2020

CVSS
—
EPSS
2%
Percentile
75.7
In the wild
Unconfirmed
What it is

In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01607 · 75.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2020-11-19T00:00Z
EPSS history
Timeline
  • 19 NOV 00:00Z
    In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course
    cvelistv5