GHSA-8mm2-m2gp-c6x2
Moodle Improper Access Control vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | moodle/moodle | < 4.3.0-rc2 | 4.3.0-rc2 |
Details
As written in the advisory (Markdown source, shown as plain text).
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2023-5542
- https://github.com/moodle/moodle/commit/b0bb97ee3b481dd85d8f1ed3612f70c9d1939014
- https://bugzilla.redhat.com/show_bug.cgi?id=2243441
- https://github.com/moodle/moodle
- https://moodle.org/mod/forum/discuss.php?d=451583
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213