Vulnerabilities > CVE-2020-25698

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

moodle

fedoraproject

NVD

Published: 2020-11-19

Updated: 2024-11-21

Summary

Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course. This could lead to them unenrolling users without having permission to do so. Versions affected: 3.5 to 3.5.14, 3.7 to 3.7.8, 3.8 to 3.8.5, 3.9 to 3.9.2 and earlier unsupported versions. Fixed in 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.

Vulnerable Configurations

Part	Description	Count
Application	Moodle Moodle Moodle 3.9.0 Moodle Moodle 3.9.1 Moodle Moodle 3.8.0 Moodle Moodle 3.8.1 Moodle Moodle 3.8.2 Moodle Moodle 3.8.3 Moodle Moodle 3.8.4 Moodle Moodle 3.7.0 Moodle Moodle 3.7.1 Moodle Moodle 3.7.2 Moodle Moodle 3.7.3 Moodle Moodle 3.7.4 Moodle Moodle 3.7.5 Moodle Moodle 3.7.6 Moodle Moodle 3.7.7 Moodle Moodle 3.7.8 Moodle Moodle 3.5.0 Moodle Moodle 3.5.1 Moodle Moodle 3.5.2 Moodle Moodle 3.5.3 Moodle Moodle 3.5.4 Moodle Moodle 3.5.5 Moodle Moodle 3.5.6 Moodle Moodle 3.5.7 Moodle Moodle 3.5.8 Moodle Moodle 3.5.9 Moodle Moodle 3.5.10 Moodle Moodle 3.5.11 Moodle Moodle 3.5.12 Moodle Moodle 3.5.13 Moodle Moodle 3.5.14	38
OS	Fedoraproject Fedoraproject Fedora 32 Fedoraproject Fedora 33	2

Vulnerabilities > CVE-2020-25698 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2020-25698"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2020-25698