CVE-2020-1692
Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.7.2"}]}]
参照URL
- advisory bugzilla.redhat.com
- web nvd.nist.gov