CVE-2022-0985

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description The issue is related to insufficient capability checks in Moodle, which could allow users with the moodle/site:uploadusers capability to delete users without having the necessary moodle/user:delete capability. This could potentially be exploited by a remote attacker to delete arbitrary users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.