Miembros de
Boletines de Vulnerabilidades |
MSA-25-0036: IDOR allows fetching of recently accessed courses for other users via web service |
|
| Software afectado | PHP |
|
par Michael Hawkins. A stricter capability check was required to restrict which users can fetch other users recently accessed courses information.Severity/Risk:MinorVersions affected:5.0, 4.5 to 4.5.4, 4.4 to 4.4.8, 4.1 to 4.1.18 and earlier unsupported versionsVersions fixed:5.0.1, 4.5.5, 4.4.9 and 4.1.19Reported by:B3XALCVE identifier:CVE-2025-49518Changes (main):http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79993Tracker issue:MDL-79993 IDOR allows More info: https://moodle.org/mod/forum/discuss.php?d=468507&parent=1880838 |
|
