CVE-2023-5549 — Moodle: insufficient capability checks when updating the parent of a course category
Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage.
Published: 2023-11-09 · CVSS: 3.3 · CVSS 3.1
Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7