CVE-2019-14829

A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities were not correctly respected when selecting the activity to use for a course in single activity mode.

Score

CVSS 3.1 4.3 Medium

Status

Modified - secalert@redhat.com

Published

2021-03-19

Last modified

2024-08-05

Weaknesses

CWE-573

Affected products

• Moodle (Moodle)

References

• https://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=208397c120b6bf74ca6a173e42cb527904c5ab42
• https://moodle.org/mod/forum/discuss.php?d=391035