mod_scorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass intended access restrictions and read SCORM contents via unspecified vectors.
References
Link | Resource |
---|---|
https://moodle.org/mod/forum/discuss.php?d=323236 | Vendor Advisory |
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50837 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2016-02-21 21:59
Updated : 2020-12-01 06:54
NVD link : CVE-2015-5341
Mitre link : CVE-2015-5341
JSON object : View
CWE
Products Affected
moodle
- moodle