EUVD-2022-3932

Malicious code in bioql PyPI...

CVE-2019-14879

A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked where applicable...

CVE-2019-14879

A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked where applicable...

CVE-2019-14879

Summary (CVE-2019-14879): Moodle prior to version 3.7.3 (3.7.x), 3.6.x prior to 3.6.7, and 3.5.x prior to 3.5.9 contains a logic issue where, after removing a cohort role assignment, the related capabilities were not revoked (where applicable). This can leave previously granted capabilities in ef...