Packagist/moodle/moodle CVE-2015-5268: medium 4.3, EPSS 1.58%

Moodle mishandles group-based authorization checks

Action: Upgrade moodle/moodle to 2.7.10 or later.

composer require moodle/moodle:2.7.10

composer require moodle/moodle:2.8.8

composer require moodle/moodle:2.9.2

Affected

Fixed versions

Sources

• osv: GHSA-h34c-px28-rjgw
• https://nvd.nist.gov/vuln/detail/CVE-2015-5268
• https://github.com/moodle/moodle/commit/20ff15e22b4f0abebe1ab5fbfd1d681c88765e2a
• https://github.com/moodle/moodle/commit/4015226623111438158fa762b7ce61f6cf677665
• https://github.com/moodle/moodle/commit/731c2712e746053b1ca06b50118632305b447e02
• https://github.com/moodle/moodle/commit/fa57105063129eed83bf09d83348681501ff5b64
• https://github.com/moodle/moodle
• https://moodle.org/mod/forum/discuss.php?d=320292
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50173
• http://www.openwall.com/lists/oss-security/2015/09/21/1
• http://www.securitytracker.com/id/1033619

CVE-2015-5268 · published 2022-05-13T01:12:47Z · modified 2024-11-29T05:28:57.779833Z · JSON