Miembros de
Boletines de Vulnerabilidades |
MSA-25-0016: Assignment submissions search on anonymous submissions reveals student identities |
|
| Software afectado | PHP |
|
von Michael Hawkins. Additional capability checks were required to prevent teachers from being able to identify a users anonymous assignment submissions via the submissions search.Severity/Risk:MinorVersions affected:4.5 to 4.5.3Versions fixed:4.5.4Reported by:EliotCVE identifier:CVE-2025-3628Changes (main):http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-84447Tracker issue:MDL-84447 Assignment submissions search on anonymous submissions reveals student More info: https://moodle.org/mod/forum/discuss.php?d=467595&parent=1877214 |
|
