Vulnerability Bulletins |
MSA-25-0033: Course visibility not honoured consistently |
|
| Affected software | PHP |
|
di Michael Hawkins. Insufficient state and capability checks resulted in some details of hidden courses (such as course name, description and teachers) being available to users who did not have permission to access them.Severity/Risk:SeriousVersions affected:5.0, 4.5 to 4.5.4, 4.4 to 4.4.8, 4.1 to 4.1.18 and earlier unsupported versionsVersions fixed:5.0.1, 4.5.5, 4.4.9 and 4.1.19Reported by:Vincent SchneiderCVE identifier:CVE-2025-49515Changes More info: https://moodle.org/mod/forum/discuss.php?d=468504&parent=1880835 |
|