Description

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.

Remediation

References

CVE-2021-43560

Related Vulnerabilities

Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-28852)

Apache HTTP Server Other Vulnerability (CVE-2004-0885)

Oracle Database Server CVE-2019-2799 Vulnerability (CVE-2019-2799)

WordPress Plugin Social Share Icons & Social Share Buttons Security Bypass (3.0.2)

WordPress Plugin Floating Chat Widget:Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button-Chaty Multiple Cross-Site Scripting Vulnerabilities (2.8.3)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-668 CVE-2021-43560