Boletines de Vulnerabilidades

MSA-25-0012: Hidden grades are shown to users without permission on some grade reports

   
Software afectado PHP
 
di Michael Hawkins. Insufficient capability checks in some grade reports resulted in some hidden grades being available to users who did not have permission to view them.Severity/Risk:MinorVersions affected:4.5 to 4.5.2, 4.4 to 4.4.6, 4.3 to 4.3.10, 4.1 to 4.1.16 and earlier unsupported versionsVersions fixed:4.5.3, 4.4.7, 4.3.11 and 4.1.17Reported by:Ilya TregubovCVE identifier:CVE-2025-32045Changes

More info:

https://moodle.org/mod/forum/discuss.php?d=467086&parent=1875067