{"action":"Upgrade moodle/moodle to 3.6.7 or later.","affected":[{"fixed":"3.6.7","introduced":"3.6"},{"fixed":"3.7.3","introduced":"3.7"}],"component":"moodle/moodle","cve_ids":["CVE-2019-14883"],"ecosystem":"Packagist","epss":0.01094,"exploited":false,"fixed_versions":["3.6.7","3.7.3"],"ghsa_id":"GHSA-774q-wfcp-vc2q","id":"tcs_01M5KEXS8B6NEZQ2G2BBCWHA5N","modified_at":"2024-04-24T00:11:49.060040Z","published_at":"2022-05-24T17:11:48Z","references":["https://osv.dev/vulnerability/GHSA-774q-wfcp-vc2q","https://nvd.nist.gov/vuln/detail/CVE-2019-14883","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14883","https://github.com/moodle/moodle","https://moodle.org/mod/forum/discuss.php?d=393586#p1586750"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-774q-wfcp-vc2q","url":"https://osv.dev/vulnerability/GHSA-774q-wfcp-vc2q"}],"summary":"Moodle Email media URL tokens were not checking for user status"}