description: In Moodle, insufficient capability checks meant message deletions were not limited to the current user.
problem types: CWE-276
affected:
{
vendor: n/a
product: Moodle
versions:
version: 3.11, 3.10 to 3.10.4, 3.9 to 3.9.7 and earlier unsupported versions, status: affected
}