Vulnerability Bulletins |
MSA-17-0014: Course overview block reveals activities in hidden courses |
|
| Affected software | PHP |
|
by Marina Glancy. Timeline view of the new course overview block can show events for activities that user can not yet access because the course is hidden.Severity/Risk:MinorVersions affected:3.3Versions fixed:3.3.1Reported by:Charles FultonCVE identifier:CVE-2017-7531Changes (master):http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-59304Tracker issue:MDL-59304 Course overview block reveals activities in hidden courses More info: https://moodle.org/mod/forum/discuss.php?d=355555&parent=1434235 |
|