Description

In Moodle, insufficient capability checks meant message deletions were not limited to the current user.

Remediation

References

CVE-2021-36397

Related Vulnerabilities

Oracle JRE CVE-2019-2983 Vulnerability (CVE-2019-2983)

WordPress Plugin AVH Extended Categories Widgets Unspecified Vulnerability (4.0.2)

WordPress Plugin Mass Delete Unused Tags Cross-Site Request Forgery (2.0.0)

jQuery UI Autocomplete Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-31160)

WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Request Forgery (4.0.9)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities CVE-2021-36397