Moodle permission permission and access control issue vulnerability (CNVD-2021-93378)

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. moodle has a permission permission and access control issue vulnerability that stems from insufficient detection of functionality in the web calendar service, which allows an attacker to access other users’ calendar operation events.