Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4342
HistoryJun 01, 2017 - 5:04 a.m.

Capability Check Bypass

2017-06-0105:04:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.004

Percentile

72.7%

Moodle is vulnerable to capability check bypasses. Authenticated users can bypass capability checks because the is_enrolled function in lib/accesslib.php does not correctly interact with the caching feature.

EPSS

0.004

Percentile

72.7%