CVE-2016-8644 In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context

Description

In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Moodle 2.x and 3.x	Versions non publiées

Autres CVE de Moodle 2.x and 3.x

Les 9 CVE de Moodle 2.x and 3.x →

CVE-2017-7489 In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link Non notée CVE-2017-7490 In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing Non notée CVE-2017-7491 In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the… Non notée CVE-2017-2641 In Moodle 2.x and 3.x, SQL injection can occur via user preferences Non notée