A flaw was found in moodle. External API access to Quiz can override contained insufficient access control.