Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring a course, which allows teachers to create new accounts even if they do not have the moodle/user:create capability.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Nov 7, 2019 | Apr 29, 2010 |
| Suse | — | Upgrade moodle-svUpgrade moodle-de_duUpgrade moodle-glUpgrade moodle-elUpgrade moodle-knUpgrade moodle-msUpgrade moodle-ltUpgrade moodle-idUpgrade moodle-zh_cnUpgrade moodle-gaUpgrade moodle-faUpgrade moodle-euUpgrade moodle-caUpgrade moodle-hiUpgrade moodle-soUpgrade moodle-nnUpgrade moodle-esUpgrade moodle-mi_tnUpgrade moodle-heUpgrade moodle-koUpgrade moodle-beUpgrade moodle-slUpgrade moodle-huUpgrade moodle-lvUpgrade moodle-trUpgrade moodle-roUpgrade moodle-daUpgrade moodle-afUpgrade moodle-frUpgrade moodle-ukUpgrade moodle-viUpgrade moodle-plUpgrade moodle-jaUpgrade moodle-itUpgrade moodle-deUpgrade moodle-kaUpgrade moodle-ptUpgrade moodle-noUpgrade moodle-csUpgrade moodleUpgrade moodle-skUpgrade moodle-hrUpgrade moodle-isUpgrade moodle-sqUpgrade moodle-arUpgrade moodle-fiUpgrade moodle-ruUpgrade moodle-bsUpgrade moodle-bgUpgrade moodle-kmUpgrade moodle-thUpgrade moodle-srUpgrade moodle-nlUpgrade moodle-etUpgrade moodle-tl | Feb 17, 2015 | Apr 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub