CVE-2021-43560

2021-11-2216:00:22

CWE-863

fedora

www.cve.org

moodle

security flaw

capability checks

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

39.2%

JSON

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users’ calendar action events.

CNA Affected

[
  {
    "product": "moodle",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "moodle 3.11.4, moodle 3.10.8 and moodle 3.9.11"
      }
    ]
  }
]