Description
A vulnerability was found in moodle before version 3.6.3. The get_with_capability_join and get_users_by_capability functions were not taking context freezing into account when checking user capabilities
Remediation
References
Related Vulnerabilities
MySQL CVE-2020-14614 Vulnerability (CVE-2020-14614)
Jenkins Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2018-1999043)
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43790)
Oracle Application Server CVE-2006-0284 Vulnerability (CVE-2006-0284)
WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (2.1.23)