CVE-2020-1692 HIGH

CVE-2020-1692

Vendor The Moodle Project
Product moodle
Weakness CWE-352 · CSRF
Published February 17, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

8.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.

Key dates

02Disclosure timeline

February 17, 2020 CVE published
August 4, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-2223 Image Slider <= 1.1.121 - Cross-Site Request Forgery to Post Duplication CVE-2021-47820 Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF) CVE-2024-2110 Events Manager <= 6.4.7.1 - Cross-Site Request Forgery CVE-2025-47674 WordPress Credova_Financial plugin <= 2.5.0 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2024-27967 WordPress DSGVO All in one for WP plugin <= 4.3 - Cross Site Request Forgery (CSRF) vulnerability