Description
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.
Remediation
References
Related Vulnerabilities
phpMyAdmin Other Vulnerability (CVE-2004-0129)
WordPress Plugin S3 Video Cross-Site Scripting (0.982)
WordPress Plugin Startklar Elementor Addons Arbitrary File Upload (1.7.13)
WordPress Plugin WordPress Books Gallery Security Bypass (3.5)
WordPress Plugin Companion Auto Update Multiple Vulnerabilities (3.2.0)