CVE-2017-7532: Medium severity Moodle moodle vulnerability
Published Jul 17, 2017
·Updated
In Moodle 3.x, course creators are able to change system default settings for courses.
Affected Software
25 affected componentsFixes available
composer/moodle/moodle<3.1.7
3.1.7
composer/moodle/moodle>=3.2.0<3.2.4
3.2.4
composer/moodle/moodle=3.3.0
3.3.1
Moodle moodle=3.1.0
Moodle moodle=3.1.0-beta
Moodle moodle=3.1.0-rc1
Moodle moodle=3.1.0-rc2
Moodle moodle=3.1.1
Moodle moodle=3.1.2
Moodle moodle=3.1.3
Moodle moodle=3.1.4
Moodle moodle=3.1.5
Moodle moodle=3.1.6
Moodle moodle=3.2.0
Moodle moodle=3.2.0-beta
Moodle moodle=3.2.0-rc1
Moodle moodle=3.2.0-rc2
Moodle moodle=3.2.0-rc3
Moodle moodle=3.2.0-rc4
Moodle moodle=3.2.0-rc5
Moodle moodle=3.2.1
Moodle moodle=3.2.2
Moodle moodle=3.2.3
Moodle moodle=3.3.0
Moodle moodle=3.3.1
Remediation
Patch Available
Event History
Jul 17, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
May 13, 2022
Advisory Published
01:47 AM
Frequently Asked Questions
1
What is the severity of CVE-2017-7532?
The severity of CVE-2017-7532 is considered medium, as it allows course creators to manipulate system default settings.
2
How do I fix CVE-2017-7532?
To mitigate CVE-2017-7532, update Moodle to a version later than 3.3.1 where this vulnerability has been addressed.
3
Who is affected by CVE-2017-7532?
CVE-2017-7532 affects Moodle versions 3.1.0 through 3.3.1, allowing unauthorized changes by course creators.
4
What are the implications of CVE-2017-7532?
The implications of CVE-2017-7532 include potential exposure to unauthorized configuration changes in course settings.
5
Is there a workaround for CVE-2017-7532?
A possible workaround for CVE-2017-7532 is to limit course creator permissions until a patch is applied.