Miembros de
Boletines de Vulnerabilidades |
MSA-24-0042: Unprotected access to sensitive information via dynamic tables |
|
| Software afectado | PHP |
|
di Michael Hawkins. Dynamic tables did not enforce capability checks, which resulted in users having the ability to retrieve information they did not have permission to access.Note: Please check the information at the bottom of this announcement for important information related to this fix.Severity/Risk:SeriousVersions affected:4.4 to 4.4.2, 4.3 to 4.3.6, 4.2 to 4.2.9, 4.1 to 4.1.12 and earlier unsupported versionsVersions fixed:4.4.3, 4.3.7, 4.2.10 and 4.1.13Reported by:Frédéric More info: https://moodle.org/mod/forum/discuss.php?d=461894&parent=1854491 |
|
