Security Advisory

CVE-2014-0129

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-03-22 01:00:00

Last updated 2024-08-06 09:05:38

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

badges/mybadges.php in Moodle 2.5.x before 2.5.5 and 2.6.x before 2.6.2 does not properly track the user to whom a badge was issued, which allows remote authenticated users to modify the visibility of an arbitrary badge via unspecified vectors.

← Browse all CVEs View on cve.org ↗