Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2015-3273 - Vulnerability Database

Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2015-3273

Medium

Reference: CVE-2015-3273

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-3273

Title: Moodle Permissions Privileges and Access Controls Vulnerability

Overview:

mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing quotPost a copy to all groupsquot actions which allows remote authenticated users to bypass intended access restrictions by leveraging per-group authorization.