User Account Vulnerability in Moodle by Moodle HQ
CVE-2018-1082
8.1HIGH
What is CVE-2018-1082?
A vulnerability exists in Moodle versions 3.4 to 3.4.1 and 3.3 to 3.3.4 that allows users to bypass account suspension if they were previously confirmed using the OAuth2 authentication method. This flaw enables users with suspended accounts to log in to the site, posing significant risks to user security and data integrity. Administrators are urged to apply appropriate security measures to safeguard against unauthorized access.
Affected Version(s)
Moodle 3.4 to 3.4.1, 3.3 to 3.3.4