Security Advisory

CVE-2019-3808

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-03-25 17:28:32

Last updated 2024-08-04 19:19:18

Assigner redhat

State PUBLISHED

Description

A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The manage groups capability did not have the XSS risk flag assigned to it, but does have that access in certain places. Note that the capability is intended for use by trusted users, and is only assigned to teachers and managers by default.

← Browse all CVEs View on cve.org ↗