Description (CNA)
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / moodle | affected moodle 3.11.4, moodle 3.10.8 and moodle 3.9.11 |
CWE
CWE-863
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2021519
- https://moodle.org/mod/forum/discuss.php?d=429100
ADP enrichment
No English description supplied.