Insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course.
|Versions affected:||3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions|
|Versions fixed:||3.10, 3.9.3, 3.8.6, 3.7.9 and 3.5.15|
|Reported by:||Matt Petro|
|Tracker issue:||MDL-56310 Privilege escalation within a course when restoring role overrides|