Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Moodle ‘is_enrolled’函数安全绕过漏洞
Vulnerability Description
Moodle是澳大利亚马丁-多基马（Martin Dougiamas）博士开发的一套免费、开源的电子学习软件平台，也称课程管理系统、学习管理系统或虚拟学习环境。 Moodle 2.2.4之前的2.2.x版本和2.3.1之前的2.3.x版本中的lib/accesslib.php中的is_enrolled函数中存在漏洞，该漏洞源于与缓存功能未正确交互。远程认证用户可利用该漏洞通过触发用户记录缓存的未明向量，绕过目地权能检查。
CVSS Information
N/A
Vulnerability Type
N/A