[MEDIUM] Moodle does not revoke role capabilities correctly

PKSA-tsyk-q1km-44v1 CVE-2019-14879 GHSA-g9m2-c2x5-fr2v

Affected package: moodle/moodle

Affected version: >=3.5.0,<3.5.9|>=3.6.0,<3.6.7|>=3.7.0,<3.7.3

Reported by:
GitHub