Moodle · Moodle · CVE-2014-0009
**Name of the Vulnerable Software and Affected Versions**
Moodle versions 2.2.11 and earlier, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, 2.6.x before 2.6.1
**Description**
The issue allows remote authenticated users to perform certain actions via a direct request, due to the lack of enforcement of the `moodle/site:accessallgroups` capability requirement for outside-group users in a SEPARATEGROUPS configuration.
**Recommendations**
For versions 2.2.11 and earlier, update to version 2.2.12 or later.
For versions 2.3.x before 2.3.11, update to version 2.3.11 or later.
For versions 2.4.x before 2.4.8, update to version 2.4.8 or later.
For versions 2.5.x before 2.5.4, update to version 2.5.4 or later.
For versions 2.6.x before 2.6.1, update to version 2.6.1 or later.