GHSA-8vjj-wf73-w882

Suggest an improvement
Source
https://github.com/advisories/GHSA-8vjj-wf73-w882
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-8vjj-wf73-w882/GHSA-8vjj-wf73-w882.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-8vjj-wf73-w882
Aliases
  • CVE-2011-4285
Published
2022-05-13T01:13:17Z
Modified
2024-01-17T18:56:33Z
Summary
Moodle Incorrect Default Settings
Details

The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the moodle/course:delete capability, which allows remote authenticated users to delete arbitrary courses by leveraging the teacher role.

Database specific 
{
    "cwe_ids":  [
        "CWE-276"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-01-17T18:38:44Z",
    "nvd_published_at":  "2012-07-16T10:28:00Z",
    "severity":  "MODERATE"
}
References

Affected packages

Packagist / moodle/moodle

Package

Name
moodle/moodle
Purl
pkg:composer/moodle/moodle

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.0
Fixed
2.0.2

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-8vjj-wf73-w882/GHSA-8vjj-wf73-w882.json"