CVE-2022-28986 | BDVDB-2026-175676 Detail

Description#

LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure direct object references (IDOR) vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/FlaviuPopescu/CVE-2022-28986

Exploit#

No public exploit known

History#

Version 12022-05-10Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.