Описание
Moodle has Incorrect Default Permissions
In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions.
Пакеты
moodle/moodle
>= 3.11.0-beta, < 3.11.1
3.11.1
moodle/moodle
>= 3.10.0-beta, < 3.10.5
3.10.5
moodle/moodle
< 3.9.8
3.9.8
Связанные уязвимости
In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions.
In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions.
In Moodle, insufficient capability checks made it possible to remove o ...
Уязвимость системы управления Moodle, связанная с ошибками при обработке гипертекстовых ссылок, позволяющая нарушителю обойти функции безопасности
ALT-PU-2021-2215: package `moodle` update to version 3.11.1-alt1