CVE-2020-1754
- Source
- https://cve.org/CVERecord?id=CVE-2020-1754
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-1754.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2020-1754
- Aliases
- Downstream
- Published
- 2022-08-05T16:15:10.733Z
- Modified
- 2026-07-08T16:27:21.889456Z
- Severity
-
- 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.
- References
Affected packages
Git / github.com/moodle/moodle
Affected ranges
- Type
- GIT
- Repo
- https://github.com/moodle/moodle
- Events
-
IntroducedFixedIntroducedFixedIntroducedFixedIntroducedLast affected
- Database specific
{ "cpe": [ "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*", "cpe:2.3:a:moodle:moodle:3.8.0:*:*:*:*:*:*:*", "cpe:2.3:a:moodle:moodle:3.8.1:*:*:*:*:*:*:*" ], "source": [ "CPE_RANGE", "CPE_STRING" ], "extracted_events": [ { "introduced": "3.5.0" }, { "fixed": "3.5.11" }, { "introduced": "3.6.0" }, { "fixed": "3.6.9" }, { "introduced": "3.7.0" }, { "fixed": "3.7.5" }, { "introduced": "3.8.0" }, { "last_affected": "3.8.0" }, { "introduced": "3.8.1" }, { "last_affected": "3.8.1" } ] }