Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-3808
5.4
MEDIUMCVSS v3
Published
March 25, 2019
CVSS v2
4 MEDIUM
Affected
5 projects
Assigned by
Red Hat
Severity scale
010
Description
A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' capability did not have the 'XSS risk' flag assigned to it, but does have that access in certain places. Note that the capability is intended for use by trusted users, and is only assigned to teachers and managers by default.
moodle/moodle
GitHubMoodle - the world's open source learning platform
GitHubMoodle - the world's open source learning platform>= 3.1.0, <= 3.1.15, >= 3.4.0, <= 3.4.6, >= 3.5.0, <= 3.5.3, = 3.6.0, = 3.6.1, >= 3.6.0, < 3.6.2, >= 3.5.0, < 3.5.4, >= 3.2.0, < 3.4.7, < 3.1.16NVD
moodle
NPMModel module for node for use with both mongodb and mysql.
NPMModel module for node for use with both mongodb and mysql.>= 3.1.0, <= 3.1.15, >= 3.4.0, <= 3.4.6, >= 3.5.0, <= 3.5.3, = 3.6.0, = 3.6.1NVD
RubyGems