Skip to content
OpenAdvisories

Vendor

mdjnelson

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.6

    mdjnelson/moodle-mod_customcert Vulnerable to Authorization Bypass Through User-Controlled Key

    mdjnelson/moodle-mod_customcert is a Moodle plugin for creating dynamically generated certificates with complete customization via the web browser. Prior to versions 4.4.9 and 5.0.3, a teacher who holds `mod/customcert:manage` in any single course can read an…