CVE-2022-0334
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.8.10"},{"introduced":"3.9.0"},{"fixed":"3.9.12"},{"introduced":"3.10.0"},{"fixed":"3.10.9"},{"introduced":"3.11.0"},{"fixed":"3.11.5"}]}]
Références
- advisory bugzilla.redhat.com
- advisory moodle.org
- web nvd.nist.gov