What the vulnerability does

01Description

A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once confirmed but later suspended, the user could still login to the site.

Key dates

02Disclosure timeline

April 4, 2018 CVE published
September 16, 2024 Record updated