Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-5rr5-fxhc-jv64
Advisory ID github_osv/GHSA-5rr5-fxhc-jv64
Aliases CVE-2014-0129
Summary Moodle allows attackers to modify the visibility of a badge badges/mybadges.php in Moodle 2.5.x before 2.5.5 and 2.6.x before 2.6.2 does not properly track the user to whom a badge was issued, which allows remote authenticated users to modify the visibility of an arbitrary badge via unspecified vectors.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44140
http://openwall.com/lists/oss-security/2014/03/17/1
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/100ec861820ce763d4f25a9f98649bb1ae17e7a5
https://github.com/moodle/moodle/commit/28c8ac2c4a8d831f0efd653fa499a5d2384e6e88
https://github.com/moodle/moodle/commit/c5d7d20f40a71e23d951c7272675a19fef170fbe
https://moodle.org/mod/forum/discuss.php?d=256424
CVE-2014-0129 https://nvd.nist.gov/vuln/detail/CVE-2014-0129
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.