CVE-2022-0985 · Vexday

CVE-2022-0985

EPSS 0.5%CWE-287

Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability.

Affected products

n/a · moodle

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugzilla.redhat.com/show_bug.cgi?id=2064117