~ / search / GHSA-jr83-8x65-xcr5

GHSA-jr83-8x65-xcr5

Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Source: GitHub Advisory Database (reviewed) Low CVE-2023-5551

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 4.3.0-beta, < 4.3.0-rc2 4.3.0-rc2
Packagist moodle/moodle >= 4.2.0, < 4.2.3 4.2.3
Packagist moodle/moodle >= 4.1.0, < 4.1.6 4.1.6
Packagist moodle/moodle >= 4.0.0, < 4.0.11 4.0.11
Packagist moodle/moodle >= 3.10.0, < 3.11.17 3.11.17
Packagist moodle/moodle < 3.9.24 3.9.24

Details

As written in the advisory (Markdown source, shown as plain text).

Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.

References

External links from the advisory. They lead to third-party sites.