CVE-2019-3849 in Moodle

요약

\~에 의해 MITRE

A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Users could assign themselves an escalated role within courses or content accessed via LTI, by modifying the request to the LTI publisher site.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 책임이 있는: Red Hat, Inc.
• 예약하다: 2019. 01. 03.
• 모더레이션: 수락
• 항목: VDB-132450
• CPE: 준비됨
• CWE: CWE-264 (확인됨)
• CVSS: 8.8 (NVD)
• EPSS: 0.00374
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Education, Police

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-3849
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-3849
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-3849/