4

CVE-2010-1616

Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring a course, which allows teachers to create new accounts even if they do not have the moodle/user:create capability.

Data is provided by the National Vulnerability Database (NVD)
MoodleMoodle Version1.8.1
MoodleMoodle Version1.8.2
MoodleMoodle Version1.8.3
MoodleMoodle Version1.8.4
MoodleMoodle Version1.8.5
MoodleMoodle Version1.8.6
MoodleMoodle Version1.8.7
MoodleMoodle Version1.8.8
MoodleMoodle Version1.8.9
MoodleMoodle Version1.8.10
MoodleMoodle Version1.8.11
MoodleMoodle Version1.9.1
MoodleMoodle Version1.9.2
MoodleMoodle Version1.9.3
MoodleMoodle Version1.9.4
MoodleMoodle Version1.9.5
MoodleMoodle Version1.9.6
MoodleMoodle Version1.9.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.28% 0.482
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:P/A:N