Vulnerability Bulletins |
MSA-25-0038: Course Logs report did not respect Separate Groups mode |
|
| Affected software | PHP |
|
by Michael Hawkins. Separate Groups mode restrictions were not honoured when viewing a courses Logs report, so actions of all course participants were displayed in the report. By default this only provided additional access to non-editing teachers.Severity/Risk:MinorVersions affected:5.0 to 5.0.1, 4.5 to 4.5.5, 4.4 to 4.4.9, 4.1 to 4.1.19 and earlier unsupported versionsVersions fixed:5.0.2, 4.5.6, 4.4.10 and 4.1.20Reported by:Sara ArjonaCVE identifier:Pending (will be added once More info: https://moodle.org/mod/forum/discuss.php?d=469491&parent=1884760 |
|