CVE-2019-14829: Medium severity moodle vulnerability
A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities were not correctly respected when selecting the activity to use for a course in single activity mode.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14829?
CVE-2019-14829 has a severity rating of Medium due to its impact on activity creation capabilities in Moodle.
How do I fix CVE-2019-14829?
To fix CVE-2019-14829, update Moodle to the latest version that addresses this vulnerability.
Which versions of Moodle are affected by CVE-2019-14829?
CVE-2019-14829 affects Moodle versions 3.5 to 3.5.7, 3.6 to 3.6.5, and 3.7 to 3.7.1.
Can CVE-2019-14829 allow unauthorized access to course activities?
Yes, CVE-2019-14829 can potentially allow unauthorized users to create activities due to misconfiguration.
Is there a patch available for CVE-2019-14829?
Yes, a patch for CVE-2019-14829 is included in the recent Moodle releases that resolve this vulnerability.