CVE-2018-1136
N/A
N/A
Summary
An issue was discovered in Moodle 3.x. An authenticated user is allowed to add HTML blocks containing scripts to their Dashboard; this is normally not a security issue because a personal dashboard is visible to this user only. Through this security vulnerability, users can move such a block to other pages where they can be viewed by other users.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Moodle 3.x unknown | Moodle 3.x unknown | affected |
Weaknesses
- incorrect access control
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.