PT-2019-11600

CVE-2019-10154

Published

2019-06-18

Updated

2022-05-24

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.7 Moodle versions prior to 3.6.4

Description: A flaw was found in a web service that fetches messages, which was not restricted to the current user's conversations.

Recommendations: For versions prior to 3.7, update to version 3.7 or later. For versions prior to 3.6.4, update to version 3.6.4 or later.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-WW45-X87C-WGFF

ALT-PU-2019-2080

ALT-PU-2019-2096

Found an issue in the description? Have something to add? Feel free to write us 👾