CVE-2020-14321
23Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 17%
from disclosure to weapon0 days
Published on NVDAug 16
metasploitJul 20
exploitation probability
17%top 3% of all CVEs
observed exploitation
nono source reports it
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.
Affected products
n/a · Moodle