A flaw was found in Moodle. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.
2024-11-20T11:15:05.337
2025-06-02T15:33:57.730
Analyzed
CVSSv3.1: 6.5 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | moodle | moodle | < 4.1.13 | Yes |
Application | moodle | moodle | < 4.2.10 | Yes |
Application | moodle | moodle | < 4.3.7 | Yes |
Application | moodle | moodle | < 4.4.3 | Yes |