GHSA-92q5-2h76-vgmj
moodle Improper Access Control
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | moodle/moodle | < 3.5.7 | 3.5.7 |
| Packagist | moodle/moodle | >= 3.6.0, < 3.6.5 | 3.6.5 |
| Packagist | moodle/moodle | >= 3.7.0, < 3.7.1 | 3.7.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in a quiz group could modify group overrides for other groups in the same quiz.
References
External links from the advisory. They lead to third-party sites.