| Package | Affected versions | Patched versions |
|---|---|---|
| moodle/moodle | ≥ 3.10, < 3.10.8≥ 3.11, < 3.11.4≥ 3.9, < 3.9.11 | 3.10.83.11.43.9.11 |
| extra packages for enterprise linux | = 7.0 | |
| moodle | ≥ 3.10.0, < 3.10.8≥ 3.11.0, < 3.11.4≥ 3.9.0, < 3.9.11≤ 3.8.8 | 3.10.83.11.43.9.11 |
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free