VULNERABILITY INTELLIGENCE

CVE-2021-20283

CVSS score4.3 MEDIUM
EPSS probability1.11%
CISA KEVNot currently listed
Published2021-03-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in each course in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.

Weakness classification

  • secalert@redhat.com: CWE-863
  • nvd@nist.gov: CWE-862

Primary references