QwikSec

Security Database

CVE

CWE

Training

CVE-2022-0333

Published: Jan 25, 2022

Modified: Aug 2, 2024

PUBLISHED

Description

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events.

Vendor	Product	Versions
n/a	moodle	affected `moodle 3.11.5, moodle 3.10.9 and moodle 3.9.12`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=2043663

x_refsource_MISC

https://moodle.org/mod/forum/discuss.php?d=431100

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.