Moodle allows attackers to read SCORM contents

MEDIUM 4.3CVE-2015-5341 · GHSA-c2r4-f8qv-2v7v · Published 22/02/2016 · updated 17/06/2026

In short

CVE-2015-5341 is a MEDIUM (CVSS 4.3) vulnerability affecting moodle/moodle, moodle (moodle).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.6% of all vulnerabilities.
Fix: update to 2.8.9, 2.9.3, 2.7.11 or later.

Package	Affected versions	Patched versions
moodle/moodle Packagist	`≥ 2.8.0, < 2.8.9≥ 2.9.0, < 2.9.3< 2.7.11`	`2.8.92.9.32.7.11`
moodle moodle	`= 2.7.0= 2.7.1= 2.7.10= 2.7.2= 2.7.3= 2.7.4= 2.7.5= 2.7.6= 2.7.7= 2.7.8= 2.7.9= 2.8.0= 2.8.1= 2.8.2= 2.8.3= 2.8.4= 2.8.5= 2.8.6= 2.8.7= 2.8.8= 2.9.0= 2.9.1= 2.9.2≤ 2.6.11`	No fix yet

Description

mod_scorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 mishandles availability dates, which allows remote authenticated users to bypass intended access restrictions and read SCORM contents via unspecified vectors.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2015-5341 · ADVISORY
moodle/moodle commit 03b1f63 · WEB
moodle/moodle commit 3d58fd5 · WEB
moodle/moodle commit 5f65bb2 · WEB
moodle/moodle commit d01512e · WEB
moodle/moodle commit d28eedd · WEB
moodle/moodle commit f1178eb · WEB
moodle/moodle commit fe9bd2b · WEB
moodle/moodle · PACKAGE
moodle.org/mod/forum/discuss.php · WEB
git.moodle.org/gw · WEB

More vulnerabilities in moodle/moodle

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

moodle/moodle

Packagist

≥ 2.8.0, < 2.8.9≥ 2.9.0, < 2.9.3< 2.7.11

2.8.92.9.32.7.11

moodle

= 2.7.0= 2.7.1= 2.7.10= 2.7.2= 2.7.3= 2.7.4= 2.7.5= 2.7.6= 2.7.7= 2.7.8= 2.7.9= 2.8.0= 2.8.1= 2.8.2= 2.8.3= 2.8.4= 2.8.5= 2.8.6= 2.8.7= 2.8.8= 2.9.0= 2.9.1= 2.9.2≤ 2.6.11

No fix yet

Description

NVD description

More vulnerabilities in moodle/moodle

See all →