Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2020-25698

Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course. This could lead to them unenrolling users without having permission to do so. Versions affected: 3.5 to 3.5.14, 3.7 to 3.7.8, 3.8 to 3.8.5, 3.9 to 3.9.2 and earlier unsupported versions. Fixed in 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
moodle / moodle 3.9.0 3.9.2.x
moodle / moodle 3.8.0 3.8.5.x
moodle / moodle 3.7.0 3.7.8.x
moodle / moodle 3.5.0 3.5.14.x
fedoraproject / fedora 32 32.x
fedoraproject / fedora 33 33.x
moodle / moodle 3.9.0 3.9.3
moodle / moodle 3.8.0 3.8.6
moodle / moodle 3.7.0 3.7.9
moodle / moodle - 3.5.15