VULNERABILITY INTELLIGENCE

CVE-2009-4299

CVSS score5 MEDIUM
EPSS probability2.10%
CISA KEVNot currently listed
Published2009-12-16
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.

Primary references