Miembros de
Boletines de Vulnerabilidades |
MSA-24-0054: Database activity issue in separate groups mode, for users not in a group |
|
| Software afectado | PHP |
|
di Michael Hawkins. In a database activity with separate groups mode enabled, users who were not in a group (and did not have permission to access all groups) could see entries from members of all groups in the activity, rather than just entries of users also not in any groups. Note: Users within groups worked as intended, only able to see entries belonging to other members of their group(s).Severity/Risk:MinorVersions affected:4.5, 4.4 to 4.4.4, 4.3 to 4.3.8, 4.1 to 4.1.14 and earlier More info: https://moodle.org/mod/forum/discuss.php?d=464557&parent=1864995 |
|
