MSA-12-0044: Capability check issue in forum subscriptions

MSA-12-0044: Capability check issue in forum subscriptions

by Michael de Raadt -
Number of replies: 0
Topic: Add some capability checks etc to mod/forum/unsubscribeall.php
Severity/Risk: Minor
Versions affected: 2.2 to 2.2.3+, 2.1 to 2.1.6+
Reported by: Andrew Davis
Issue no.: MDL-31460

CVE Identifier:

CVE-2012-3392
Changes (2.2): http://git.moodle.org/gw?p=moodle.git&a=search&h=refs%2Fheads%2FMOODLE_22_STABLE&st=commit&s=MDL-31460

Description:

The capability for students to unsubscribe from forums was not being checked properly.