Description

The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to bypass intended access restrictions and enter additional answer attempts by leveraging the student role.

Remediation

References

CVE-2015-5264

Related Vulnerabilities

WordPress Plugin WPtouch Cross-Site Scripting (4.3.42)

Jenkins Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2021-21602)

WordPress Improper Authentication Vulnerability (CVE-2008-1930)

PHP Improper Input Validation Vulnerability (CVE-2014-3480)

Oracle Database Server CVE-2010-0892 Vulnerability (CVE-2010-0892)

Severity

Medium

Classification

CVE-2015-5264 CWE-264 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities