Non évaluée
A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Users could assign themselves an escalated role within courses or content...
CVE-2019-3849
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Users could assign themselves an escalated role within courses or content accessed via LTI, by modifying the request to the LTI publisher site.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- patch bugzilla.redhat.com
- patch moodle.org