CVE-2019-14828

Name of the Vulnerable Software and Affected Versions Moodle versions 3.7 through 3.7.1 Moodle versions 3.6 through 3.6.5 Moodle versions 3.5 through 3.5.7 Moodle versions prior to 3.5

Description A vulnerability was found in Moodle where users with the capability to create courses were assigned as a teacher in those courses, regardless of whether they had the capability to be automatically assigned that role.

Recommendations For versions 3.7 through 3.7.1, update to a version outside of this range to resolve the issue. For versions 3.6 through 3.6.5, update to a version outside of this range to resolve the issue. For versions 3.5 through 3.5.7, update to a version outside of this range to resolve the issue. For versions prior to 3.5, update to a version 3.5 or later to resolve the issue.