GHSA-wx87-h539-4775
Moodle Information Disclosure vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | moodle/moodle | >= 3.5, < 3.5.18 | 3.5.18 |
| Packagist | moodle/moodle | >= 3.8, < 3.8.9 | 3.8.9 |
| Packagist | moodle/moodle | >= 3.9, < 3.9.7 | 3.9.7 |
| Packagist | moodle/moodle | >= 3.10, < 3.10.4 | 3.10.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected
References
External links from the advisory. They lead to third-party sites.