Moodle Authorization Logic Flaw in Badge Awarding Process Allowing Privilege Escalation

An authorization logic flaw has been identified in Moodle, where incomplete role checks during the badge awarding process allowed unauthorized users to receive badges they were not entitled to. This vulnerability could lead to privilege escalation or unauthorized access to certain features.

Impact

Exploitation of this vulnerability could result in unauthorized users obtaining badges, potentially allowing them to access additional privileges or features they should not have.