Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to.
| Severity/Risk: | Minor |
| Versions affected: | 3.7, 3.6 to 3.6.4, 3.5 to 3.5.6 and earlier unsupported versions |
| Versions fixed: | 3.7.1, 3.6.5 and 3.5.7 |
| Reported by: | Peter Dias |
| CVE identifier: | CVE-2019-10187 |
| Changes (master): | http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-64623 |
| Tracker issue: | MDL-64623 Ability to delete glossary entries that belong to another glossary |