Vulnerability Bulletins

MSA-19-0016: Assignment group overrides did not observe separate groups mode

   
Affected software PHP
 
by Michael Hawkins. Teachers in an assignment group could modify group overrides for other groups in the same assignment.Severity/Risk:MinorVersions affected:3.7, 3.6 to 3.6.4, 3.5 to 3.5.6 and earlier unsupported versionsVersions fixed:3.7.1, 3.6.5 and 3.5.7Reported by:David MonllaóCVE identifier:CVE-2019-10189Changes (master):http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-61114Tracker issue:MDL-61114 Assignment group overrides did not observe

More info:

https://moodle.org/mod/forum/discuss.php?d=388570&parent=1566332