Description

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.

Remediation

References

CVE-2019-10187

Related Vulnerabilities

Apache version older than 1.3.37

WordPress Plugin Brizy-Page Builder Multiple Vulnerabilities (2.4.43)

MySQL CVE-2016-5628 Vulnerability (CVE-2016-5628)

WordPress Plugin Users Ultra Membership Cross-Site Scripting (1.5.78)

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-21702)

Severity

Medium

Classification

CVE-2019-10187 CWE-862 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities