WS-2017-3804

In Sakai, versions 11.0 through 11.4 are vulnerable to improper authorization. An attacker with “lessons update” permission could edit any page and subpage, including of other users...