CVE-2021-36397

CVE-2021-36397

In Moodle, insufficient capability checks meant message deletions were not limited to the current user.

Source: CVE-2021-36397