Miembros de
Boletines de Vulnerabilidades |
MSA-25-0033: Course visibility not honoured consistently |
|
| Software afectado | PHP |
|
par Michael Hawkins. Insufficient state and capability checks resulted in some details of hidden courses (such as course name, description and teachers) being available to users who did not have permission to access them.Severity/Risk:SeriousVersions affected:5.0, 4.5 to 4.5.4, 4.4 to 4.4.8, 4.1 to 4.1.18 and earlier unsupported versionsVersions fixed:5.0.1, 4.5.5, 4.4.9 and 4.1.19Reported by:Vincent SchneiderCVE identifier:CVE-2025-49515Changes More info: https://moodle.org/mod/forum/discuss.php?d=468504&parent=1880835 |
|
