Vulnerability Bulletins

MSA-23-0021: Some block permissions on Dashboard not respected


System information

   
Affected software PHP

Description

von Michael Hawkins. Permission overrides on individual blocks in the system dashboard did not cascade to user dashboards.Severity/Risk:MinorVersions affected:4.2 to 4.2.1, 4.1 to 4.1.4, 4.0 to 4.0.9, 3.11 to 3.11.15, 3.9 to 3.9.22 and earlier unsupported versionsVersions fixed:4.2.2, 4.1.5, 4.0.10, 3.11.16 and 3.9.23Reported by:Bas HarkinkCVE identifier:CVE-2023-40318Changes (master):http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-78340Tracker

More info:

https://moodle.org/mod/forum/discuss.php?d=449642&parent=1807044

Standar resources

Property Value
CVE

Version history

Version Comments Date
Ministerio de Defensa
CNI
CCN
CCN-CERT