CVE-2011-4295

CVE-2011-4295 affects Moodle’s enrolment external API: the function moodle_enrol_external:role_assign in enrol/externallib.php lacks an authorization check in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1, allowing remote authenticated users to escalate privileges by assigning roles. The issue...