Sploitus

CVE-2020-14321

11 known exploits for CVE-2020-14321

In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.

Affected products
Alt Linux, Moodle
Moodle
< 3.5.13, 3.7.7, 3.8.4, 3.9.0
Fix
Available
CVSS 3.1
8.8 HIGH
EPSS
16.2% (97th percentile)
Weakness
CWE-863
NVD status
Modified
Published
2022-08-16
CVE-2020-14321 at NVD
Authoritative description, scoring and affected products

11 known exploits for CVE-2020-14321

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2020-14321-modified-exploit
2026-08-29 KitPloitKITPLOIT
CVE-2020-14321
2026-08-29 KitPloitKITPLOIT
CVE-2020-14321
2026-08-26 KitPloitKITPLOIT
Moodle Teacher Enrollment Privilege Escalation / Remote Code Execution Exploit
2021-10-13 metasploitZDTRuby
Moodle Teacher Enrollment Privilege Escalation / Remote Code Execution
2021-10-12 h00diePACKETSTORMRuby
Moodle 3.9 - Remote Code Execution (Authenticated) Exploit
2021-08-05 lanzZDTPython
Moodle 3.9 - Remote Code Execution (RCE) (Authenticated)
2021-08-05 lanzEXPLOITDBPython
Moodle 3.9 Remote Code Execution
2021-08-05 lanzPACKETSTORMPython
Exploit for Incorrect Authorization in Moodle
2021-04-28 lanztGITHUB
Exploit for Incorrect Authorization in Moodle
2020-07-26 HoangKien1020GITHUB
Moodle Teacher Enrollment Privilege Escalation to RCE
2020-07-20 HoangKien1020, lanz, h00dieMETASPLOITRuby