GHSA-h7xp-7fjp-ghhcMediumCVSS 4.0

moodle Improper Access Control

Published
May 24, 2022
Last Modified
April 23, 2024

🔗 CVE IDs covered (1)

CVE-2019-10189 →

📋 Description

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment.

🎯 Affected products3

  • composer/moodle/moodle:>= 3.7.0, < 3.7.1
  • composer/moodle/moodle:>= 3.6.0, < 3.6.5
  • composer/moodle/moodle:< 3.5.7

🔗 References (5)