Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-3848
4.3
MEDIUMCVSS v3
Published
March 26, 2019
CVSS v2
4 MEDIUM
Affected
5 projects
Assigned by
Red Hat
Severity scale
010
Description
A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Permissions were not correctly checked before loading event information into the calendar's edit event modal popup, so logged in non-guest users could view unauthorised calendar events. (Note: It was read-only access, users could not edit the events.)
moodle/moodle
GitHubMoodle - the world's open source learning platform
GitHubMoodle - the world's open source learning platform>= 3.5.0, < 3.5.5, >= 3.6.0, < 3.6.3, < 3.4.8, >= 3.4, < 3.4.8, >= 3.5, < 3.5.5, >= 3.6, < 3.6.3NVD
moodle
NPMModel module for node for use with both mongodb and mysql.
NPMModel module for node for use with both mongodb and mysql.>= 3.5.0, < 3.5.5, >= 3.6.0, < 3.6.3, < 3.4.8NVD
RubyGems