Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Exposure of Resource to Wrong Sphere Vulnerability - CVE-2022-0334 - Vulnerability Database
Moodle

Moodle Exposure of Resource to Wrong Sphere Vulnerability - CVE-2022-0334

Medium
Reference: CVE-2022-0334
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-0334
Title: Moodle Exposure of Resource to Wrong Sphere Vulnerability
Overview:

A flaw was found in Moodle in versions 3.11 to 3.11.4 3.10 to 3.10.8 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability.