Description
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants."
Unscored
CVE-2015-5272
EUVD-2015-5251GHSA-r227-v24c-j96q
The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role…
Published Feb 22, 2016 · Updated Aug 6, 2024 · Assigned by redhat