Back to feed
EUVD-2022-2024 · Published May 13, 2022
Moodle Weak Password Recovery Mechanism for Forgotten Password In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.
Technologies
Moodle Moodle
Weaknesses
CWE-640
CVSS scores
- v3.07.3
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
