CVE-2019-3808
Published Mar 25, 2019
Last updated 4 years ago
Overview
- Description
- A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' capability did not have the 'XSS risk' flag assigned to it, but does have that access in certain places. Note that the capability is intended for use by trusted users, and is only assigned to teachers and managers by default.
- Source
- secalert@redhat.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 5.4
- Impact score
- 2.7
- Exploitability score
- 2.3
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
CVSS 3.0
- Type
- Secondary
- Base score
- 4.3
- Impact score
- 1.4
- Exploitability score
- 2.8
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:N/I:P/A:N
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "979D2B8B-FB1F-4802-AAFC-13715A82293F",
"versionEndIncluding": "3.1.15",
"versionStartIncluding": "3.1.0"
},
{
"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9F284BC-D530-49F7-9E42-36FC8E4EFDE8",
"versionEndIncluding": "3.4.6",
"versionStartIncluding": "3.4.0"
},
{
"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D254FDF9-DF04-4959-9587-893D08254BC5",
"versionEndIncluding": "3.5.3",
"versionStartIncluding": "3.5.0"
},
{
"criteria": "cpe:2.3:a:moodle:moodle:3.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C489C5AC-3B1A-4018-A044-212D23CAB9A5"
},
{
"criteria": "cpe:2.3:a:moodle:moodle:3.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2435A46-C617-4296-B5A4-836093F1853B"
}
],
"operator": "OR"
}
]
}
]