CVE-2012-4408

CVE-2012-4408 affects Moodle: 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2. The issue arises because course/reset.php validates an update capability instead of a reset capability, allowing remote authenticated users to bypass intended access restrictions via a reset operation. I...