CVE-2022-0334: Exposure of Resource to Wrong Sphere

January 25, 2022 (updated December 21, 2022)

Insufficient capability checks could lead to users accessing their grade report for courses where they does not have the required gradereport/user:view capability.

References

bugzilla.redhat.com/show_bug.cgi?id=2043664
moodle.org/mod/forum/discuss.php?d=431102
nvd.nist.gov/vuln/detail/CVE-2022-0334

Detect and mitigate CVE-2022-0334 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →