description: A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events.
problem types: CWE-863
affected:
{
product: moodle
vendor: n/a
versions:
status: affected, version: moodle 3.11.5, moodle 3.10.9 and moodle 3.9.12
}