VULNERABILITY INTELLIGENCE

CVE-2020-1754

CVSS score4.3 MEDIUM
EPSS probability0.68%
CISA KEVNot currently listed
Published2022-08-05
Last modified2026-06-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.

Weakness classification

  • secalert@redhat.com: CWE-284
  • nvd@nist.gov: CWE-732

Primary references