CVE-2019-14829

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-03-19 · updated 2026-06-17
Weakness: CWE-573

Description

A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities were not correctly respected when selecting the activity to use for a course in single activity mode.

Affected products

Moodle: from 3.5.0 through 3.5.7; from 3.6.0 through 3.6.5; from 3.7.0 through 3.7.1

References

https://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=208397c120b6bf74ca6a173e42cb527904c5ab42
https://moodle.org/mod/forum/discuss.php?d=391035
https://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=208397c120b6bf74ca6a173e42cb527904c5ab42
https://moodle.org/mod/forum/discuss.php?d=391035

Get alerted when CVE-2019-14829 or the next vulnerability affects your stack