Access Restriction Bypass

Moodle is vulnerable to access restriction bypass. Authenticated attackers can circumvent access restrictions and conduct spam attacks because moodle doesn't correctly check the contact list before the authorization of message transmissions...