CVE-2019-14829 - A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities were not correctly respected when selecting the activity to use for a course in single activity mode

Back Back to CVE browser

MEDIUM

A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities were not correctly respected when selecting the activity to use for a course in single activity mode

Published Mar 19, 2021

4.3

MEDIUM

CVSS 3.1

EPSS 0.74%

Description

A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities were not correctly respected when selecting the activity to use for a course in single activity mode.

Affected products

Vendor n/a Product Moodle Default
n/a
- Version
  3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Moodle

n/a

Version	Status	Constraints
3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-573

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5956
Advisory
https://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=208397c120b6bf74ca6a173e42cb527904c5ab42
x_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=391035
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5956		Advisory
https://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=208397c120b6bf74ca6a173e42cb527904c5ab42		x_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=391035		x_refsource_MISCVendor Advisory