CVE-2020-1692 - Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course

HIGH

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course

Published Feb 17, 2020

8.1

HIGH

CVSS 3.1

EPSS 0.57%

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.

Vendor The Moodle Project Product Moodle Default
unknown
Affected
- before 3.7.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
The Moodle Project	Moodle	unknown	Affected before 3.7.2

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1692		x_refsource_CONFIRMIssue TrackingThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0539		Advisory
https://github.com/advisories/GHSA-9328-7pcw-vw69		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-1692