https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T14:41:17.624206+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2012-avi-396 certa-2012-avi-396 — Douze vulnérabilités ont été corrigés dans <span class="textit">Moodle</span>. Elles permettent à un utilisateur malint… 2026-10-15T14:41:17.627977+00:00 certa-2012-avi-396 https://cve.radiocsirt.org/vuln/euvd-2026-111764 EUVD-2026-111764 2026-10-15T14:41:17.628035+00:00 EUVD-2026-111764 https://cve.radiocsirt.org/vuln/fkie_cve-2012-3388 fkie_cve-2012-3388 2026-10-15T14:41:17.628050+00:00

The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.

 https://cve.radiocsirt.org/vuln/ghsa-mxp2-wcjh-jf72 GHSA-mxp2-wcjh-jf72 2026-10-15T14:41:17.628078+00:00

The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.

 https://cve.radiocsirt.org/vuln/gsd-2012-3388 gsd-2012-3388 2026-10-15T14:41:17.628094+00:00 gsd-2012-3388 https://cve.radiocsirt.org/vuln/ubuntu-cve-2012-3388 Withdrawn: UBUNTU-CVE-2012-3388 2026-10-15T14:41:17.628104+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: moodle

The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.