Description
The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability (site administrators by default). Moodle versions 3.10 to 3.10.3 are affected.
References
https://moodle.org/mod/forum/discuss.php?d=422313
PatchVendor Advisory
https://moodle.org/mod/forum/discuss.php?d=422313
PatchVendor Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4.3 · Medium
Information
Source identifier
Vulnerability status
Modified
Published
2022-03-11T17:15:18.497Z
3 years agoLast modified
2024-11-21T05:07:06.890Z
1 year ago