Description
The rating component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 mishandles group-based authorization checks, which allows remote authenticated users to obtain sensitive information by reading a rating value.
Remediation
References
Related Vulnerabilities
MySQL CVE-2019-2691 Vulnerability (CVE-2019-2691)
WordPress Plugin Google Sitemap by BestWebSoft Cross-Site Scripting (2.9.1)
WordPress Plugin Admin Menu Cross-Site Scripting (1.1)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-32472)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5293)