CVE-2012-3388
moodle moodle: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.
The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-11-01)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- moodle:moodle