medium4.3
CVE-2018-1044
Moodle Privilege escalation in quiz web services
Impact
In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | moodle/moodle | >= 3.1, < 3.1.10 | 3.1.10 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | through 3.1.9 Versions 3.2.0, 3.2.1, 3.2.2, 3.2.3, 3.2.4 |