~ / search / GHSA-wr6q-xv23-rfq9

GHSA-wr6q-xv23-rfq9

Moodle Incorrect Authorization

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-40692

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 3.11, < 3.11.3 3.11.3
Packagist moodle/moodle >= 3.10, < 3.10.7 3.10.7
Packagist moodle/moodle >= 3.9, < 3.9.10 3.9.10

Details

As written in the advisory (Markdown source, shown as plain text).

Insufficient capability checks made it possible for teachers to download users outside of their courses.

References

External links from the advisory. They lead to third-party sites.