Vulnerability Bulletins

MSA-25-0039: Feedback activity results did not always respect Separate Groups mode

   
Affected software PHP
 
by Michael Hawkins. Feedback activity results for all groups in Separate Groups mode could be viewed by non-editing teachers when they were not a member of any group.Severity/Risk:MinorVersions affected:5.0 to 5.0.1, 4.5 to 4.5.5, 4.4 to 4.4.9, 4.1 to 4.1.19 and earlier unsupported versionsVersions fixed:5.0.2, 4.5.6, 4.4.10 and 4.1.20Reported by:Sara ArjonaCVE identifier:Pending (will be added once available)Changes

More info:

https://moodle.org/mod/forum/discuss.php?d=469492&parent=1884761