CVE-2022-0333CWE-863

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions

published January 25, 2022

CVSS
—
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00641 · 50.1th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2022-01-25T19:11Z
EPSS history
Timeline
  • 25 JAN 19:11Z
    A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions
    cvelistv5