Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Incorrect Authorization Vulnerability - CVE-2021-20283 - Vulnerability Database
Moodle

Moodle Incorrect Authorization Vulnerability - CVE-2021-20283

Medium
Reference: CVE-2021-20283
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-20283
Title: Moodle Incorrect Authorization Vulnerability
Overview:

The web service responsible for fetching other users39 enrolled courses did not validate that the requesting user had permission to view that information in each course in moodle before 3.10.2 3.9.5 3.8.8 3.5.17.