Vulnerabilities > CVE-2017-7490 - Exposure of Resource to Wrong Sphere vulnerability in Moodle

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2017-05-15

Updated: 2019-10-03

Summary

In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.

Part	Description	Count
Application	Moodle Moodle Moodle 2.7.1 Moodle Moodle 3.1.0 Moodle Moodle 2.7.0 Moodle Moodle 3.0.7 Moodle Moodle 3.2.0 Moodle Moodle 2.7.6 Moodle Moodle 2.7.14 Moodle Moodle 2.7.11 Moodle Moodle 2.7.2 Moodle Moodle 2.7.4 Moodle Moodle 2.7.15 Moodle Moodle 3.0.6 Moodle Moodle 3.2.2 Moodle Moodle 2.7.16 Moodle Moodle 2.7.9 Moodle Moodle 3.0.5 Moodle Moodle 3.0.4 Moodle Moodle 3.0.2 Moodle Moodle 2.7.12 Moodle Moodle 3.0.0 Moodle Moodle 3.1.2 Moodle Moodle 3.1.4 Moodle Moodle 2.7.10 Moodle Moodle 2.7.17 Moodle Moodle 2.7.5 Moodle Moodle 3.0.1 Moodle Moodle 2.7.3 Moodle Moodle 3.1.3 Moodle Moodle 2.7.18 Moodle Moodle 2.7.13 Moodle Moodle 3.0.3 Moodle Moodle 3.0.8 Moodle Moodle 2.7.8 Moodle Moodle 3.2.1 Moodle Moodle 3.1.1 Moodle Moodle 2.7.7	53