PT-2017-8650

CVE-2016-5014

·

Published

2017-01-20

·

Updated

2022-05-13

Description by

CVSS 2.0
5.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x
Description The issue allows an unenrolled user to still receive event monitor notifications for a course they can no longer access.
Recommendations For Moodle versions 2.x through 3.x, update to a version where this issue is resolved to prevent unenrolled users from receiving unnecessary notifications.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-C4CQ-V4WP-28HG
Found an issue in the description? Have something to add? Feel free to write us 👾