CVE-2021-20283CWE-863

The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in…

published March 15, 2021

CVSS
—
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in each course in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01110 · 65.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2021-03-15T21:36Z
EPSS history
Timeline
  • 15 MAR 21:36Z
    The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in…
    cvelistv5