The vulnerability was found Moodle which exists due to insufficient limitations on the start page preference. A remote attacker can set that preference for another user. The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Moodle | Moodle | 3.9.0 (including) | 3.9.19 (excluding) |
| Moodle | Moodle | 3.11.0 (including) | 3.11.12 (excluding) |
| Moodle | Moodle | 4.0.0 (including) | 4.0.6 (excluding) |
| Moodle | Moodle | 4.1.0 (including) | 4.1.0 (including) |