CVE-2021-20184CWE-354

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able…

published January 28, 2021

CVSS
—
EPSS
1%
Percentile
53.3
In the wild
Unconfirmed
What it is

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00719 · 53.3th percentile
Weakness
CWE-354 · Improper Validation of Integrity Check Value
Published
2021-01-28T18:44Z
EPSS history
Timeline
  • 28 JAN 18:44Z
    It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able…
    cvelistv5