A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities were not correctly respected when selecting the activity to use for a course in single activity mode.
Weakness
The product does not follow or incorrectly follows the specifications as required by the implementation language, environment, framework, protocol, or platform.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Moodle | Moodle | 3.5.0 (including) | 3.5.7 (including) |
| Moodle | Moodle | 3.6.0 (including) | 3.6.5 (including) |
| Moodle | Moodle | 3.7.0 (including) | 3.7.1 (including) |
| Moodle | Ubuntu | bionic | * |
| Moodle | Ubuntu | trusty | * |
| Moodle | Ubuntu | xenial | * |