VULNERABILITY INTELLIGENCE

CVE-2022-0333

CVSS score3.8 LOW

EPSS probability0.64%

CISA KEVNot currently listed

Published2022-01-25

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Description

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events.

Weakness classification

patrick@puiterwijk.org: CWE-863
nvd@nist.gov: CWE-863

Primary references

patrick@puiterwijk.org — Issue Tracking, Third Party Advisory
patrick@puiterwijk.org — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory