~ / search / GHSA-jfrg-9hpq-9hvp

GHSA-jfrg-9hpq-9hvp

Improper Access Control in moodle

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-25981

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 4.3.0, < 4.3.3 4.3.3
Packagist moodle/moodle >= 4.2.0, < 4.2.6 4.2.6
Packagist moodle/moodle < 4.1.9 4.1.9

Details

As written in the advisory (Markdown source, shown as plain text).

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers.

References

External links from the advisory. They lead to third-party sites.