{"id":"CVE-2020-1692","aliases":["BIT-moodle-2020-1692","GHSA-9328-7pcw-vw69"],"url":"https://o3.security/vulnerability/CVE-2020-1692","summary":"Cross-Site Request Forgery in Moodle","details":"Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.","published":"2020-02-17T16:15:28.693Z","modified":"2026-07-09T00:06:26.733381Z","cvss":{"score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"epss":{"score":0.00572,"percentile":0.44678,"asOf":"2026-08-23"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"moodle/moodle","fixedVersion":"3.7.2"}],"fix":null,"references":[{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1692"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T00:06:26.733381Z"}}