Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2019-10189

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment.

VectorNETWORK

PublishedJul 31, 2019, 22:15

Published Bysecalert@redhat.com

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

moodle/moodle(Packagist)3.7.03.7.1N/A

moodle/moodle(Packagist)3.6.03.6.5N/A

moodle/moodle(Packagist)03.5.7N/A

References

http://www.securityfocus.com/bid/109271
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10189
https://moodle.org/mod/forum/discuss.php?d=388570

Weakness Type

NVD-CWE-Other

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK