Description

In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.

Remediation

References

CVE-2016-8644

Related Vulnerabilities

WordPress Plugin BigBlueButton Cross-Site Scripting (2.2.3)

WordPress Plugin WP Affiliate Platform Multiple Vulnerabilities (6.3.9)

WordPress Plugin Email Before Download SQL Injection (6.7)

PHP Numeric Errors Vulnerability (CVE-2013-7226)

WordPress Plugin Social Auto Poster-WordPress Scheduler & Marketing Cross-Site Scripting (5.3.14)

Severity

Medium

Classification

CVE-2016-8644 CWE-264 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities