mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-frUpgrade moodle-plUpgrade moodle-csUpgrade moodle-etUpgrade moodle-ukUpgrade moodle-kmUpgrade moodle-de_duUpgrade moodle-sqUpgrade moodle-afUpgrade moodle-trUpgrade moodle-beUpgrade moodle-bsUpgrade moodle-kaUpgrade moodle-bgUpgrade moodle-ptUpgrade moodle-lvUpgrade moodle-arUpgrade moodleUpgrade moodle-fiUpgrade moodle-roUpgrade moodle-hrUpgrade moodle-tlUpgrade moodle-isUpgrade moodle-jaUpgrade moodle-esUpgrade moodle-thUpgrade moodle-knUpgrade moodle-ruUpgrade moodle-srUpgrade moodle-idUpgrade moodle-soUpgrade moodle-mi_tnUpgrade moodle-skUpgrade moodle-ltUpgrade moodle-elUpgrade moodle-svUpgrade moodle-euUpgrade moodle-viUpgrade moodle-gaUpgrade moodle-nnUpgrade moodle-koUpgrade moodle-hiUpgrade moodle-zh_cnUpgrade moodle-noUpgrade moodle-itUpgrade moodle-glUpgrade moodle-heUpgrade moodle-deUpgrade moodle-nlUpgrade moodle-msUpgrade moodle-slUpgrade moodle-daUpgrade moodle-caUpgrade moodle-faUpgrade moodle-hu | Feb 17, 2015 | Dec 15, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub