Headline
CVE-2021-36400
In Moodle, insufficient capability checks made it possible to remove other users’ calendar URL subscriptions.
Related news
GHSA-35wf-3wq2-r3hx: Moodle has Incorrect Default Permissions
In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions.