Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-1754

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.

Published

2022-08-05T16:15:10.733

Last Modified

2024-11-21T05:11:18.953

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-284
  • Type: Primary
    CWE-732
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application moodle moodle < 3.5.11 Yes
Application moodle moodle < 3.6.9 Yes
Application moodle moodle < 3.7.5 Yes
Application moodle moodle 3.8.0 Yes
Application moodle moodle 3.8.1 Yes
References