CVE-2020-14321
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.
Original description
The description as published by the source.
In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"3.5.0"},{"fixed":"3.5.13"},{"introduced":"3.7.0"},{"fixed":"3.7.7"},{"introduced":"3.8.0"},{"fixed":"3.8.4"},{"introduced":"3.9.0"},{"fixed":"3.9.1"}]}]
References
- advisory moodle.org
- web nvd.nist.gov