CVE-2026-102583

Katalog CVE

CVSS 2.7 · Low EPSS 0,24%

Kerentanan Direct Request ('Forced Browsing') pada moodle. Skor CVSS 3.1 2.7 (Low) menurut puiterwijk.org.

Deskripsi (NVD)

A flaw was found in Moodle. An incorrect capability check in the artificial intelligence (AI) editor placement's image generation web service allows an authenticated user to invoke the feature without holding the required capability. This flaw permits unauthorized users to access and utilize the AI image generation functionality.

Rincian

Terbit di NVD

30 September 2026

Terakhir diubah

1 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

2.7 (Low), sumber puiterwijk.org
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-425: Direct Request ('Forced Browsing')

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 14,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://moodle.org/mod/forum/discuss.php?d=482501 advisory vendor
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-88587 patch
• https://access.redhat.com/security/cve/CVE-2026-102583 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2543640 issue tracking · advisory pihak ketiga