CVE-2026-102584

Description

A flaw was found in Moodle. Due to a missing capability check, a low-privileged authenticated user can trigger the recalculation of grade penalties without holding the required permissions. This issue allows unauthorized users to modify grade penalty records, potentially altering student assessment scores.

Traduire en français

Produits concernés

• Moodle moodle

Scores CVSS

Faiblesses (CWE)

• CWE-425

Références

• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-88585 Patch
• https://access.redhat.com/security/cve/CVE-2026-102584 Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2543637 Issue TrackingThird Party Advisory
• https://moodle.org/mod/forum/discuss.php?d=482502 Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories