CVE-2019-10187

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.

Score

CVSS 3.1 4.3 Medium

Status

Modified - secalert@redhat.com

Published

2019-07-31

Last modified

2024-08-04

Weaknesses

CWE-284, CWE-862

Affected products

• Moodle (Moodle)
• Moodle (The Moodle Project)

References

• http://www.securityfocus.com/bid/109174
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10187
• https://moodle.org/mod/forum/discuss.php?d=388568#p1566330