GHSA-c767-4whh-v7rwLowCVSS 5.3

Moodle has user information visibility control issues in gradebook reports

Published
November 11, 2024
Last Modified
November 12, 2024

🔗 CVE IDs covered (1)

CVE-2024-43429 →

📋 Description

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

🎯 Affected products4

  • composer/moodle/moodle:>= 4.4.0, < 4.4.2
  • composer/moodle/moodle:>= 4.3.0, < 4.3.6
  • composer/moodle/moodle:>= 4.2.0, < 4.2.9
  • composer/moodle/moodle:< 4.1.12

🔗 References (5)