CVE-2022-0984
MEDIUM4.3EPSS 0.18%Missing authorization in Moodle
發布日:2022/4/30修改日:2023/12/6
描述
Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.
受影響套件(2)
- Bitnami/moodle>= 3.9.0, < 3.9.13, >= 3.10.0, < 3.10.10, >= 3.11.0, < 3.11.6
- Packagist/moodle/moodle>= 3.11.0, < 3.11.6
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |