GHSA-4gq2-x5w4-7hp8
Moodle has insufficient capability checks
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | moodle/moodle | >= 4.4.0, < 4.4.2 | 4.4.2 |
| Packagist | moodle/moodle | >= 4.3.0, < 4.3.6 | 4.3.6 |
| Packagist | moodle/moodle | >= 4.2.0, < 4.2.9 | 4.2.9 |
| Packagist | moodle/moodle | < 4.1.12 | 4.1.12 |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary.
References
External links from the advisory. They lead to third-party sites.