CVE-2012-3388

Description

The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.

Risk Information

Base Score

4.3

MODERATE

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS Score

Exploitation Probability

0.198

Associated Vulnerability

Vulnerability	OS Platform
Update moodle 2.3 to latest version	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234