CVE-2021-32477

    Dashboard / Vulnerabilities / CVE-2021-32477

    CVE-2021-32477

    Published: 11 Mar 2022Last Modified: 24 Oct 2026

    Summary:

    Details: The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability (site administrators by default). Moodle versions 3.10 to 3.10.3 are affected.

    References: https://moodle.org/mod/forum/discuss.php?d=422313

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- ec58cefefb2722f61f77c9a2b6a12d40a8c078a0
    Fixed -237f4ccada7c8ba85ac9391193293491d8953018

    Affected versions

    v3.10.3
    v3.10.2
    v3.10.1
    v3.10.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-32477 | CVE-DB