CVE-2021-20282: Fedoraproject Fedora

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.

Affected products

• Fedoraproject Fedora: version 32 only; version 34 only
• Moodle Moodle: from 3.5.0, before 3.5.17 (fixed in 3.5.17); from 3.8.0, before 3.8.8 (fixed in 3.8.8); from 3.9.0, before 3.9.5 (fixed in 3.9.5); from 3.10.0, before 3.10.2 (fixed in 3.10.2)

Published 2021-03-15. Last modified 2026-06-17.