CVEvulnerability

CVE-2022-0333

3.8 LOW Published 2022-01-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-01-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.8 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS 2.0 ([email protected])
5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
Weaknesses
CWE-863

Description

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events.

Affected configurations

• moodle moodle (<= 3.8.9) • moodle moodle (>= 3.9.0 < 3.9.12) • moodle moodle (>= 3.10.0 < 3.10.9) • moodle moodle (>= 3.11.0 < 3.11.5)

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References