Description
The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a save_question action.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | moodle/moodle | >= 2.1, < 2.1.6 | 2.1.6 | GHSA-3rqj-jchw-9cc7 |
| Packagist | moodle/moodle | >= 2.2, < 2.2.3 | 2.2.3 | GHSA-3rqj-jchw-9cc7 |