CVE-2021-43560 - AskarLabs CVE Database

CVE-2021-43560

Vendor N/A

Product moodle

Weakness CWE-863 · Incorrect authorization

Published November 22, 2021

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.

Key dates

02Disclosure timeline

November 22, 2021 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-43560 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/863.html

Related vulnerabilities

04Related CVE

CVE-2026-40574 OAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims CVE-2025-54583 GitProxy bypasses approvals when pushing multiple branches CVE-2020-36622 sah-comp bienlein cross-site request forgery CVE-2026-54398 MISP object edit authorization bypass allows unauthorized sharing group assignment CVE-2025-24434 Adobe Commerce | Incorrect Authorization (CWE-863)