VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 19, 2021· Updated Jun 17, 2026

CVE-2019-14828

CVE-2019-14828

Description

A vulnerability was found in Moodle affecting 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where users with the capability to create courses were assigned as a teacher in those courses, regardless of whether they had the capability to be automatically assigned that role.

Affected products

3
  • Moodle/Moodle2 versions
    cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*range: >=3.5.0,<=3.5.7
    • (no CPE)range: 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions
  • Moodle/Moodledescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.