{"id":"CVE-2021-43560","state":"PUBLISHED","title":"A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch othe","description":"A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events.","publishedAt":"2021-11-22T16:00:22.000Z","updatedAt":"2024-08-04T04:03:08.485Z","severity":null,"assigner":"fedora","products":["n/a moodle"],"affected":[{"vendor":"n/a","product":"moodle","versions":[{"version":"moodle 3.11.4, moodle 3.10.8 and moodle 3.9.11","status":"affected"}]}],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=2021519","https://moodle.org/mod/forum/discuss.php?d=429100"],"weaknesses":["CWE-863"],"ingestedAt":"2026-10-29T19:49:07.642Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/43xxx/CVE-2021-43560.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-43560","state":"PUBLISHED","datePublished":"2021-11-22T16:00:22.000Z","dateUpdated":"2024-08-04T04:03:08.485Z","assignerShortName":"fedora","assignerOrgId":"92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5","dateReserved":"2021-11-09T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events."}],"affected":[{"vendor":"n/a","product":"moodle","versions":[{"version":"moodle 3.11.4, moodle 3.10.8 and moodle 3.9.11","status":"affected"}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021519","tags":["x_refsource_MISC"]},{"url":"https://moodle.org/mod/forum/discuss.php?d=429100","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-863","description":"CWE-863","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"fedora","dateUpdated":"2021-11-22T16:00:22.000Z","orgId":"92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"patrick@puiterwijk.org","ID":"CVE-2021-43560","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"moodle","version":{"version_data":[{"version_value":"moodle 3.11.4, moodle 3.10.8 and moodle 3.9.11"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-863"}]}]},"references":{"reference_data":[{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=2021519","refsource":"MISC","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021519"},{"name":"https://moodle.org/mod/forum/discuss.php?d=429100","refsource":"MISC","url":"https://moodle.org/mod/forum/discuss.php?d=429100"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2021519","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://moodle.org/mod/forum/discuss.php?d=429100","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T04:03:08.485Z"}}]}}}