GHSA-jr83-8x65-xcr5LowCVSS 3.3

Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Published
November 9, 2023
Last Modified
November 17, 2023

🔗 CVE IDs covered (1)

CVE-2023-5551 →

📋 Description

Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.

🎯 Affected products6

  • composer/moodle/moodle:>= 4.3.0-beta, < 4.3.0-rc2
  • composer/moodle/moodle:>= 4.2.0, < 4.2.3
  • composer/moodle/moodle:>= 4.1.0, < 4.1.6
  • composer/moodle/moodle:>= 4.0.0, < 4.0.11
  • composer/moodle/moodle:>= 3.10.0, < 3.11.17
  • composer/moodle/moodle:< 3.9.24

🔗 References (8)