VDB
CVE-2014-3553
CVE-2014-3553
PUBLISHED
CVSS 4.900000095367432 MEDIUM
Moodle does not enforce the moodle/site:accessallgroups capability requirement
EPSS 1.02% · 63.0th percentile
Risk Scores
CVSS 2.0
4.900000095367432
EPSS Score
1.02%
63.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| moodle | moodle | 0, 2.6.0, 2.7.0 |
| n/a | n/a | n/a |
| moodle | moodle | 2.5.4, 2.5.5, 2.5.6 |
Timeline
- Jul 29, 2014 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Apr 8, 2023 EPSS Score
- May 31, 2023 EPSS Score
- Jul 24, 2023 EPSS Score
References
- [oss-security] 20140721 Moodle security notifications public mailing-list
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38990 url
- https://moodle.org/mod/forum/discuss.php?d=264268 url
- https://nvd.nist.gov/vuln/detail/CVE-2014-3553 advisory
- https://github.com/moodle/moodle/commit/5c74e0daca748ffbbbf17a410abd8c85335b2116 url
- https://github.com/moodle/moodle/commit/91c8d4da71a6706c70071f9182e8ae6110c86d70 url
- https://github.com/moodle/moodle/commit/e3fd900dcda7b603d7e0749008abd0d01290bbc3 url
- https://github.com/moodle/moodle/commit/f2946a5419a94f19cb3490a249fe0bb50161f254 url
- https://github.com/moodle/moodle package