CVE-2021-43560 | BDVDB-2026-164751 Detail

moodle

Description#

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-863 Incorrect Authorization

References#

https://bugzilla.redhat.com/show_bug.cgi?id=2021519
https://moodle.org/mod/forum/discuss.php?d=429100

Exploit#

No public exploit known

History#

Version 12021-11-22Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.