A flaw was found in Moodle. Additional checks were required to ensure users can only delete their OAuth2-linked accounts.
2024-11-20T11:15:05.413
2025-06-02T15:34:48.510
Analyzed
CVSSv3.1: 7.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | moodle | moodle | < 4.1.13 | Yes |
| Application | moodle | moodle | < 4.2.10 | Yes |
| Application | moodle | moodle | < 4.3.7 | Yes |
| Application | moodle | moodle | < 4.4.3 | Yes |