CVE-2022-0334

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability.

Score

CVSS 3.1 4.3 Medium

Status

Modified - patrick@puiterwijk.org

Published

2022-01-25

Last modified

2024-08-02

Weaknesses

CWE-668, CWE-863

Affected products

• Moodle (Moodle)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2043664
• https://moodle.org/mod/forum/discuss.php?d=431102