QwikSec

Security Database

CVE

CWE

Training

CVE-2022-0334

Published: Jan 25, 2022

Modified: Aug 2, 2024

PUBLISHED

Description

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability.

Vendor	Product	Versions
n/a	moodle	affected `moodle 3.11.5, moodle 3.10.9 and moodle 3.9.12`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=2043664

x_refsource_MISC

https://moodle.org/mod/forum/discuss.php?d=431102

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.