Description
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.
Remediation
References
Related Vulnerabilities
OpenSSL Resource Management Errors Vulnerability (CVE-2011-0014)
WordPress Plugin Slickr Flickr Cross-Site Scripting (2.8.1)
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.34)
MySQL CVE-2015-2576 Vulnerability (CVE-2015-2576)
WordPress Plugin 3D Banner Rotator 'upload.php' Arbitrary File Upload (2.1)