CVE-2020-25699: Improper Privilege Management

November 19, 2020 (updated October 19, 2021)

In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course.

References

bugzilla.redhat.com/show_bug.cgi?id=1895425
moodle.org/mod/forum/discuss.php?d=413936
nvd.nist.gov/vuln/detail/CVE-2020-25699

Detect and mitigate CVE-2020-25699 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →