GHSA-fm5h-58g2-4m3fMediumCVSS 5.3

Moodle Improper Access Control vulnerability

Published
November 9, 2023
Last Modified
November 17, 2023

🔗 CVE IDs covered (1)

CVE-2023-5549 →

📋 Description

Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage.

🎯 Affected products1

  • composer/moodle/moodle:< 4.3.0-rc2

🔗 References (6)