CVE-2021-36400

Description

In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions.

Affected Platforms

Weakness Type

CWE-276, CWE-639

References

• https://moodle.org/mod/forum/discuss.php?d=424806
• https://moodle.org/mod/forum/discuss.php?d=424806