PT-2017-17767

CVE-2017-7490

·

Published

2017-05-15

·

Updated

2022-05-13

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x
Description A missing capability check in Moodle allows for the searching of arbitrary blogs.
Recommendations For versions 2.x through 3.x, apply the necessary patch or update to include the capability check and restrict unauthorized access to blog searches.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-668: Exposure of Resource to Wrong Sphere
Related identifiers
CVE-2017-7490
GHSA-9X63-M3CC-QF3G
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com