CVE-2022-0985 · Vexday

CVE-2022-0985

EPSS 0.5%CWE-287

Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability.

Produtos afetados

n/a · moodle

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://bugzilla.redhat.com/show_bug.cgi?id=2064117