NetSight
IP …
high7.5

CVE-2020-25699

In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course.

Impact

In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.

Affected products

VendorProductAffected versions
MoodleMoodle
from 3.5.0 through 3.5.14
from 3.7.0 through 3.7.8
from 3.8.0 through 3.8.5
from 3.9.0 through 3.9.2
FedoraprojectFedora
Versions 32, 33

Weakness classification

CWE-863

References