CVE-2021-20184: Moodle

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades.

Affected products

• Moodle Moodle: before 3.8.7 (fixed in 3.8.7); from 3.9.0, before 3.9.4 (fixed in 3.9.4); from 3.10.0, before 3.10.1 (fixed in 3.10.1)

Published 2021-01-28. Last modified 2026-06-17.