What the vulnerability does

01Description

In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.

Key dates

02Disclosure timeline

August 16, 2022 CVE published
August 4, 2024 Record updated