mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-afUpgrade moodle-etUpgrade moodle-de_duUpgrade moodle-csUpgrade moodle-fiUpgrade moodle-bsUpgrade moodle-thUpgrade moodle-ukUpgrade moodle-bgUpgrade moodle-kaUpgrade moodle-roUpgrade moodle-isUpgrade moodle-esUpgrade moodle-kmUpgrade moodle-beUpgrade moodle-tlUpgrade moodle-frUpgrade moodle-plUpgrade moodle-ptUpgrade moodleUpgrade moodle-trUpgrade moodle-hrUpgrade moodle-lvUpgrade moodle-jaUpgrade moodle-sqUpgrade moodle-arUpgrade moodle-viUpgrade moodle-elUpgrade moodle-svUpgrade moodle-huUpgrade moodle-hiUpgrade moodle-skUpgrade moodle-heUpgrade moodle-srUpgrade moodle-knUpgrade moodle-noUpgrade moodle-deUpgrade moodle-glUpgrade moodle-ltUpgrade moodle-nnUpgrade moodle-msUpgrade moodle-euUpgrade moodle-caUpgrade moodle-idUpgrade moodle-itUpgrade moodle-zh_cnUpgrade moodle-ruUpgrade moodle-soUpgrade moodle-daUpgrade moodle-faUpgrade moodle-mi_tnUpgrade moodle-slUpgrade moodle-nlUpgrade moodle-koUpgrade moodle-ga | Feb 17, 2015 | Dec 15, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub