EPSS
Percentile
60.9%
Moodle is vulnerable to privilege escalation attacks. Authenticated users can leverage the Teacher role and change their own permissions as demonstrated by obtaining the backup:userinfo capability.
Teacher
backup:userinfo
git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=0f75e1e6272db0303abc8e27362e5c3a1344b82f
git.moodle.org/gw?p=moodle.git;a=commit;h=0f75e1e6272db0303abc8e27362e5c3a1344b82f
openwall.com/lists/oss-security/2012/05/23/2
security-tracker.debian.org/tracker/CVE-2012-2359