Not rated
CVE-2016-8644 In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context
Description
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Moodle 2.x and 3.x | Versions not published |
References
- moodle.org moodle.org
- 94458 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Moodle 2.x and 3.x
The 9 CVEs of Moodle 2.x and 3.x →
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link
Not rated
CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing
Not rated
CVE-2017-7491
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the…
Not rated
CVE-2017-2641
In Moodle 2.x and 3.x, SQL injection can occur via user preferences
Not rated