Moodle · Moodle · CVE-2021-20282
Name of the Vulnerable Software and Affected Versions:
moodle versions prior to 3.10.2
moodle versions prior to 3.9.5
moodle versions prior to 3.8.8
moodle versions prior to 3.5.17
Description:
When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle.
Recommendations:
For versions prior to 3.10.2, update to version 3.10.2 or later.
For versions prior to 3.9.5, update to version 3.9.5 or later.
For versions prior to 3.8.8, update to version 3.8.8 or later.
For versions prior to 3.5.17, update to version 3.5.17 or later.