Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-a34q-gbqw-1bbr
Vulnerability ID VCID-a34q-gbqw-1bbr
Aliases CVE-2015-5342
GHSA-6xpm-q8x9-j3rw
Summary Moodle allows attackers to bypass intended access restrictions The choice module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote authenticated users to bypass intended access restrictions by visiting a URL to add or delete responses in the closed state.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-264 Permissions, Privileges, and Access Controls
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
There are no known severity scores.
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51569
https://github.com/moodle/moodle/commit/02d8c8ca394ba053905f9b87c155042aabf0ce1b
https://github.com/moodle/moodle/commit/09bb6f19e5814deb25ae6ceb8270063430b8941f
https://github.com/moodle/moodle/commit/5c16db4fc561c97b6a907398ea081cdaf6590214
https://github.com/moodle/moodle/commit/6283c33979001b035f9fc565b869296f66a61c4e
https://github.com/moodle/moodle/commit/7ca8c34045eb0d2031652b452492fe4abb2c7c8a
https://github.com/moodle/moodle/commit/97394274ee29f0a6eecab330b5bbb8ee335e7ece
https://github.com/moodle/moodle/commit/bdaa571437c6357f322871b068f02a4520b7a23d
https://github.com/moodle/moodle/commit/fb2491effb1a7d5d7abb0efba5b3929342990514
https://moodle.org/mod/forum/discuss.php?d=323237
CVE-2015-5342 https://nvd.nist.gov/vuln/detail/CVE-2015-5342
GHSA-6xpm-q8x9-j3rw https://github.com/advisories/GHSA-6xpm-q8x9-j3rw
No exploits are available.
There are no known vectors.

No EPSS data available for this vulnerability.

Date Actor Action Source VulnerableCode Version
2026-06-02T04:42:50.532857+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/moodle/moodle/CVE-2015-5342.yml 38.6.0