CVE-2012-2367: Moodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote au...

Security readout for executives and security teams

This is an old Moodle authorization flaw. A logged-in user could add a calendar entry even when the site intended to block that permission. It does not indicate remote code execution or unauthenticated access, but it can undermine role controls in affected learning portals. Exposure is limited to legacy Moodle 1.9, 2.0, 2.1, and 2.2 deployments below the fixed versions. The attacker must already have a valid authenticated account. Treat as a maintenance-priority issue for any legacy Moodle system. It is not evidenced as actively exploited, but weak role enforcement can affect trust in academic or training workflows. Mitigation focus: Upgrade affected Moodle branches to the fixed version or later.; Review Moodle’s advisory and linked issue for branch-specific guidance.; Restrict access for untrusted accounts until upgraded..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.