Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-20283
4.3
MEDIUMCVSS v3
Published
March 15, 2021
CVSS v2
4 MEDIUM
Affected
10 projects
Assigned by
Red Hat
Severity scale
010
Description
The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in each course in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
moodle/moodle
GitHubMoodle - the world's open source learning platform
GitHubMoodle - the world's open source learning platform>= 3.9.0, < 3.9.5, >= 3.5.0, < 3.5.17, >= 3.10.0, < 3.10.2, >= 3.8.0, < 3.8.8, < 3.5.17NVD
moodle
NPMModel module for node for use with both mongodb and mysql.
NPMModel module for node for use with both mongodb and mysql.>= 3.9.0, < 3.9.5, >= 3.5.0, < 3.5.17, >= 3.10.0, < 3.10.2, >= 3.8.0, < 3.8.8NVD
RubyGems
Crates.io
Docker Hub