CVE-2021-20282CWE-863

When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10.2, 3.9.5…

published March 15, 2021

CVSS
—
EPSS
1%
Percentile
70.6
In the wild
Unconfirmed
What it is

When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01317 · 70.6th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-03-15T21:35Z
EPSS history
Timeline
  • 15 MAR 21:35Z
    When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10.2, 3.9.5…
    cvelistv5