| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | < 4.3.0-rc2 | 4.3.0-rc2 |
| extra packages for enterprise linux | = 7.0 | |
| moodle | ≥ 3.11.0, < 3.11.17≥ 4.0.0, < 4.0.11≥ 4.1.0, < 4.1.6≥ 4.2.0, < 4.2.3< 3.9.24 | 3.11.174.0.114.1.64.2.33.9.24 |
Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free