CVE-2022-0985
Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user...
Original description
The description as published by the source.
Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.9.13"},{"introduced":"3.10.0"},{"fixed":"3.10.10"},{"introduced":"3.11.0"},{"fixed":"3.11.6"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com