GHSA-2mg9-hv69-897xMediumCVSS 4.3

Moodle Ability to delete glossary entries that belong to another glossary

Published
May 24, 2022
Last Modified
April 24, 2024

🔗 CVE IDs covered (1)

CVE-2019-10187 →

📋 Description

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.

🎯 Affected products3

  • composer/moodle/moodle:>= 3.7, < 3.7.1
  • composer/moodle/moodle:>= 3.6, < 3.6.5
  • composer/moodle/moodle:>= 3.5, < 3.5.7

🔗 References (5)