CVE-2023-5549 (published 2023-11-09T19:37:15.856Z)
Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage.
Affected products: Vendor: n/a
Product: moodle
Versions: 4.2.3, 4.1.6, 4.0.11, 3.11.17, 3.9.24