Description (CNA)
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / moodle | affected moodle 3.11.5, moodle 3.10.9 and moodle 3.9.12 |
CWE
CWE-863
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2043664
- https://moodle.org/mod/forum/discuss.php?d=431102
ADP enrichment
No English description supplied.