CVE-2021-40692
Insufficient capability checks made it possible for teachers to download users outside of their courses.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Insufficient capability checks made it possible for teachers to download users outside of their courses.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.10"},{"introduced":"3.10.0"},{"fixed":"3.10.7"},{"introduced":"3.11.0"},{"fixed":"3.11.3"}]}]
参照URL
- advisory bugzilla.redhat.com
- web nvd.nist.gov