Vulnerabilities > CVE-2021-36400 - Authorization Bypass Through User-Controlled Key vulnerability in Moodle

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
moodle
CWE-639
NVD
Published: 2023-03-06
Updated: 2023-03-13

Summary

In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions.

Vulnerable Configurations

Part Description Count
Application
Moodle
393

Common Weakness Enumeration (CWE)

References