GHSA-6q9g-3vfq-q2qjMediumCVSS 4.3

Improper Authentication in moodle

Published
April 30, 2022
Last Modified
September 12, 2023

🔗 CVE IDs covered (1)

CVE-2022-0985 →

📋 Description

Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability.

🎯 Affected products3

  • composer/moodle/moodle:>= 3.11.0, < 3.11.6
  • composer/moodle/moodle:>= 3.10.0, < 3.10.10
  • composer/moodle/moodle:>= 3.9, < 3.9.13

🔗 References (4)