CVE-2021-36397
In Moodle, insufficient capability checks meant message deletions were not limited to the current user.
Original description
The description as published by the source.
In Moodle, insufficient capability checks meant message deletions were not limited to the current user.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.9.8"},{"introduced":"3.10.0"},{"fixed":"3.10.5"},{"introduced":"3.11.0"},{"fixed":"3.11.1"}]}]
References
- advisory moodle.org
- web nvd.nist.gov