• info
• discussion
• exploit
• solution
• references

Moodle CVE-2016-8643 Security Bypass Vulnerability

Moodle is prone to a security-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions.

Moodle 3.1 through 3.1.2, 3.0 through 3.0.6, 2.9 through 2.9.8, 2.8 through 2.8.12, 2.7 through 2.7.16 and prior are vulnerable.