A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values.
2024-11-20T11:15:05.490
2025-06-02T15:35:23.890
Analyzed
CVSSv3.1: 5.4 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | moodle | moodle | < 4.1.13 | Yes |
| Application | moodle | moodle | < 4.2.10 | Yes |
| Application | moodle | moodle | < 4.3.7 | Yes |
| Application | moodle | moodle | < 4.4.3 | Yes |