CVE-2021-36397

CVE-2021-36397

Vendor N/A

Product Moodle

Weakness CWE-276

Published March 6, 2023

Last update March 7, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Moodle, insufficient capability checks meant message deletions were not limited to the current user.

Key dates

02Disclosure timeline

March 6, 2023 CVE published

March 7, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-36397 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/276.html

Related vulnerabilities

04Related CVE

CVE-2018-7533 CVE-2026-23703 CVE-2024-27166 Insecure permissions CVE-2024-54131 Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3) CVE-2024-25605