CVE-2021-36397

Description

In Moodle, insufficient capability checks meant message deletions were not limited to the current user.

Affected Platforms

Weakness Type

CWE-276, NVD-CWE-noinfo

References

• https://moodle.org/mod/forum/discuss.php?d=424803
• https://moodle.org/mod/forum/discuss.php?d=424803