VYPR
← All advisories
Medium severity4.3OSV Advisory· Published Mar 26, 2019· Updated Jun 17, 2026

CVE-2019-3851

CVE-2019-3851

Description

A vulnerability was found in moodle before versions 3.6.3 and 3.5.5. There was a link to site home within the the Boost theme's secure layout, meaning students could navigate out of the page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
moodle/moodlePackagist
>= 3.5, < 3.5.53.5.5
moodle/moodlePackagist
>= 3.6, < 3.6.33.6.3

Affected products

4
  • Moodle/MoodleOSV2 versions
    v3.5.0, v3.5.1, v3.5.2, …+ 1 more
    • (no CPE)range: v3.5.0, v3.5.1, v3.5.2, …
    • cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*range: >=3.5.0,<3.5.5
  • Fedoraproject/Fedora
    cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*
  • ghsa-coords
    pkg:composer/moodle/moodle
    Range: >= 3.5, < 3.5.5

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.