Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-72gv-qqrp-h9qg
Advisory ID github_osv/GHSA-72gv-qqrp-h9qg
Aliases CVE-2012-0797
Summary Moodle Users Can Bypass Deleted Status The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-287 Improper Authentication
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28126
http://moodle.org/mod/forum/discuss.php?d=194016
https://bugzilla.redhat.com/show_bug.cgi?id=783532
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/364622b4662d9f349f3701ed548cda2f31491fea
https://github.com/moodle/moodle/commit/bbcde38b334ecbfa2a18b01b77a7e995b2c0d9f7
https://github.com/moodle/moodle/commit/dbfa519ad9e4d33ac3a4cd506d606d56a2f0bbff
https://github.com/moodle/moodle/commit/e922d9a90bab337b1082fbe28c352c18cae2580e
CVE-2012-0797 https://nvd.nist.gov/vuln/detail/CVE-2012-0797
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.