MSA-26-0024: Missing capability checks in AI placement web services

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-22 13:49 UTC
Importiert: 2026-06-29 14:51 UTC
Quelle-ID: moodle
uid_hash: 931f28b719d779fc5869c35bbebcf3077c730e67d498731fbc69a57fab427938

Moodle Security Announcements

Inhalt

by Michael Hawkins.

Capability checks were missing from course assistance AI placement web services, which could allow users to make requests to those AI course assistance web services without having the relevant capabilities (if those features are enabled).

Severity/Risk: Minor

Versions affected: 5.2, 5.1 to 5.1.4, 5.0 to 5.0.7, 4.5 to 4.5.11 and earlier unsupported versions

Versions fixed: 5.2.1, 5.1.5, 5.0.8 and 4.5.12

Reported by: Paul Holden

CVE identifier: Pending (this will be updated once available)

Changes (main): http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-88533

Tracker issue: MDL-88533 Missing capability checks in AI placement web services

No data

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Moodle Security Announcements	moodle	vendor_advisory	cms	-	de	https://moodle.org/rss/file.php/154821/7ef1adaa0762dfdd7cd390868b6d9f2b/mod_forum/996/rss.xml

Zurueck zur Eintrags-Liste