Moodle Improper Access Control Vulnerability in Course Overview Function

A vulnerability exists in Moodle versions 5.0 to 5.0.2, where the course overview output function does not properly enforce user access permissions. This flaw could enable unauthorized users to access information about restricted courses, potentially revealing limited course details. The issue arises from insufficient handling of access control checks, allowing users with valid Moodle accounts to view metadata about courses they should not have access to.

Impact

Exploitation of this vulnerability could lead to unauthorized access to course information, including metadata about restricted courses.

Remediation

Users can upgrade to Moodle version 5.0.3 to address this vulnerability.