CVE-2020-1692: CSRF
Published Feb 17, 2020
·Updated
Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.
Affected Software
1 affected component
Moodle moodle<3.7.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Moodleto a version that resolves this vulnerability.Fixed in 3.7.2
Event History
Feb 17, 2020
CVE Published
via MITRE·03:38 PM
Data Sourced
via MITRE·03:38 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-1692?
CVE-2020-1692 is classified as a medium severity vulnerability.
2
How do I fix CVE-2020-1692?
To fix CVE-2020-1692, upgrade Moodle to version 3.7.2 or later.
3
What does CVE-2020-1692 expose?
CVE-2020-1692 exposes service tokens for users enrolled in the same course, leading to potential information leakage.
4
Which versions of Moodle are affected by CVE-2020-1692?
Moodle versions prior to 3.7.2 are affected by CVE-2020-1692.
5
Can CVE-2020-1692 impact user privacy?
Yes, CVE-2020-1692 can impact user privacy by exposing sensitive service tokens.