What is GHSA-q5m8-g27f-797h?

GHSA-q5m8-g27f-797h is a security advisory published by GitHub Security Advisories with Medium severity. In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without...

Which CVE IDs does GHSA-q5m8-g27f-797h cover?

GHSA-q5m8-g27f-797h covers the following CVE IDs: CVE-2020-1754. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q5m8-g27f-797h?

GHSA-q5m8-g27f-797h has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-q5m8-g27f-797hMediumCVSS 4.3

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without...

Vendor

GitHub Security Advisories

Published

August 6, 2022

Last Modified

June 23, 2026

🔗 CVE IDs covered (1)

CVE-2020-1754 →

📋 Description

In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were not restricted to viewing grades of users within their own groups.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2020-1754
https://moodle.org/mod/forum/discuss.php?d=398350
https://github.com/advisories/GHSA-q5m8-g27f-797h