CVE-2022-0985
Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.9.13"},{"introduced":"3.10.0"},{"fixed":"3.10.10"},{"introduced":"3.11.0"},{"fixed":"3.11.6"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com