Description

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.

Remediation

References

CVE-2021-43560

Related Vulnerabilities

WordPress Plugin Custom Field Template PHP Object Injection (2.5.7)

WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Multiple Security Bypass Vulnerabilities (2.1.10)

Oracle Database Server CVE-2015-2655 Vulnerability (CVE-2015-2655)

MongoDb Other Vulnerability (CVE-2018-20802)

Apache Traffic Server CVE-2024-35296 Vulnerability (CVE-2024-35296)

Severity

Medium

Classification

CVE-2021-43560 CWE-668 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities