Vulnerability Details CVE-2020-25700
In moodle, some database module web services allowed students to add entries within groups they did not belong to. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.8.6, 3.7.9, 3.5.15, and 3.10.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.0%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
Products affected by CVE-2020-25700
-
cpe:2.3:a:moodle:moodle:3.5.0
-
cpe:2.3:a:moodle:moodle:3.5.1
-
cpe:2.3:a:moodle:moodle:3.5.10
-
cpe:2.3:a:moodle:moodle:3.5.11
-
cpe:2.3:a:moodle:moodle:3.5.12
-
cpe:2.3:a:moodle:moodle:3.5.13
-
cpe:2.3:a:moodle:moodle:3.5.14
-
cpe:2.3:a:moodle:moodle:3.5.2
-
cpe:2.3:a:moodle:moodle:3.5.3
-
cpe:2.3:a:moodle:moodle:3.5.4
-
cpe:2.3:a:moodle:moodle:3.5.5
-
cpe:2.3:a:moodle:moodle:3.5.6
-
cpe:2.3:a:moodle:moodle:3.5.7
-
cpe:2.3:a:moodle:moodle:3.5.8
-
cpe:2.3:a:moodle:moodle:3.5.9
-
cpe:2.3:a:moodle:moodle:3.7.0
-
cpe:2.3:a:moodle:moodle:3.7.1
-
cpe:2.3:a:moodle:moodle:3.7.2
-
cpe:2.3:a:moodle:moodle:3.7.3
-
cpe:2.3:a:moodle:moodle:3.7.4
-
cpe:2.3:a:moodle:moodle:3.7.5
-
cpe:2.3:a:moodle:moodle:3.7.6
-
cpe:2.3:a:moodle:moodle:3.7.7
-
cpe:2.3:a:moodle:moodle:3.7.8
-
cpe:2.3:a:moodle:moodle:3.8.0
-
cpe:2.3:a:moodle:moodle:3.8.1
-
cpe:2.3:a:moodle:moodle:3.8.2
-
cpe:2.3:a:moodle:moodle:3.8.3
-
cpe:2.3:a:moodle:moodle:3.8.4
-
cpe:2.3:a:moodle:moodle:3.8.5
-
cpe:2.3:a:moodle:moodle:3.9.0
-
cpe:2.3:a:moodle:moodle:3.9.1
-
cpe:2.3:a:moodle:moodle:3.9.2
-
cpe:2.3:o:fedoraproject:fedora:32
-
cpe:2.3:o:fedoraproject:fedora:33