Moodle — система управления образовательными электронными курсами

Moodle IDOR when deleting OAuth2 linked accounts

Moodle allows users to retrieve information they did not have permission to access

A vulnerability was found in Moodle. Additional checks are required to ensure users can only fetch the list of course badges for courses that they are intended to have access to.

A vulnerability was found in Moodle. Additional checks are required to ...

A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values.

A flaw was found in Moodle. When restricting access to a lesson activi ...

A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts.

A flaw was found in Moodle. Additional checks were required to ensure ...

A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.

A flaw was found in Moodle. Dynamic tables did not enforce capability ...