Beveiligingsadvies

CVE-2012-6106

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-01-27 22:00:00

Laatst bijgewerkt 2024-09-16 16:27:37

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

calendar/managesubscriptions.php in the Manage Subscriptions implementation in Moodle 2.4.x before 2.4.1 omits a capability check, which allows remote authenticated users to remove course-level calendar subscriptions by leveraging the student role and sending an iCalendar object.

← Alle CVE's bekijken Bekijk op cve.org ↗