QwikSec

Security Database

CVE

CWE

Training

CVE-2020-25698

Published: Nov 19, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course. This could lead to them unenrolling users without having permission to do so. Versions affected: 3.5 to 3.5.14, 3.7 to 3.7.8, 3.8 to 3.8.5, 3.9 to 3.9.2 and earlier unsupported versions. Fixed in 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.

Vendor	Product	Versions
n/a	moodle	affected `Fixed in 3.9.3` affected `Fixed in 3.8.6` affected `Fixed in 3.7.9` affected `Fixed in 3.5.15` affected `Fixed in 3.10`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=1895419

x_refsource_MISC

https://moodle.org/mod/forum/discuss.php?d=413935

x_refsource_MISC

FEDORA-2020-304aa2c365

vendor-advisory

x_refsource_FEDORA

FEDORA-2020-db73e37548

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.