EPSS
Percentile
72.7%
Moodle is vulnerable to capability check bypasses. Authenticated users can bypass capability checks because the is_enrolled function in lib/accesslib.php does not correctly interact with the caching feature.
is_enrolled
lib/accesslib.php
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33916
openwall.com/lists/oss-security/2012/07/17/1
secunia.com/advisories/49890
www.securityfocus.com/bid/54481
exchange.xforce.ibmcloud.com/vulnerabilities/76955