Description (CNA)
A vulnerability was found in Moodle versions 3.7 before 3.7.3, 3.6 before 3.6.7, 3.5 before 3.5.9 and earlier. OAuth 2 providers who do not verify users' email address changes require additional verification during sign-up to reduce the risk of account compromise.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| [UNKNOWN] / moodle | affected 3.7 before 3.7.3; affected 3.6 before 3.6.7; affected 3.5 before 3.5.9; affected 3.5 and earlier |
CWE
CWE-287
References
ADP enrichment
No English description supplied.