Skip to content
fr Sign in
Not rated

CVE-2019-14828 A vulnerability was found in Moodle affecting 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions,…

Description

A vulnerability was found in Moodle affecting 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where users with the capability to create courses were assigned as a teacher in those courses, regardless of whether they had the capability to be automatically assigned that role.

Affected products and versions

Product Affected versions Fixed in
Moodle Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Moodle

The 89 CVEs of Moodle →
CVE-2022-40208 In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential… 4.3 Medium CVE-2021-36402 In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration… 5.3 Medium CVE-2021-36395 In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion… 7.5 High CVE-2021-36392 In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses Not rated
Track this CVE