In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions.
2023-03-06T22:15:09.547
2025-03-07T18:15:34.827
Modified
CVSSv3.1: 5.3 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | moodle | moodle | < 3.9.8 | Yes |
| Application | moodle | moodle | < 3.10.5 | Yes |
| Application | moodle | moodle | < 3.11.1 | Yes |