CVE-2021-32473: Infoleak
It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-32473?
CVE-2021-32473 has a moderate severity level, which could potentially lead to unauthorized access to quiz grades.
How do I fix CVE-2021-32473?
To remediate CVE-2021-32473, upgrade Moodle to version 3.10.4, 3.9.7, 3.8.9, or 3.5.18 accordingly.
Which Moodle versions are affected by CVE-2021-32473?
CVE-2021-32473 affects Moodle versions from 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, and 3.5 to 3.5.17.
What can happen if CVE-2021-32473 is exploited?
Exploitation of CVE-2021-32473 may allow students to view their quiz grades prematurely before they are officially released.
Is CVE-2021-32473 still a risk if my Moodle is updated?
If your Moodle is updated to a version that is not affected, such as 3.10.4 or later, CVE-2021-32473 is no longer a risk.