-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper time-validation logic in the global scope of mod/feedback/complete.php and mod/feedback/complete_guest.php. The original code used logical operators (OR/AND) with incorrect precedence, leading to flawed checks for feedback availability. The patch replaced these with ||/&& to enforce proper grouping. However, this logic resides in the main script flow of these files, not within any named functions. Thus, no specific functions are directly implicated, but the vulnerability is tied to the procedural code in these files.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| moodle/moodle | composer | < 2.4.9 | 2.4.9 |
| moodle/moodle | composer | >= 2.5.0, < 2.5.5 | 2.5.5 |
| moodle/moodle | composer | >= 2.6.0, < 2.6.2 | 2.6.2 |