Vulnerability Bulletins

MSA-23-0012: Course participation report shows roles the user should not see

System information

Affected software PHP


par Michael Hawkins. The course participation report required additional checks to prevent roles being displayed which the user did not have access to view.Severity/Risk:MinorVersions affected:4.1 to 4.1.1, 4.0 to 4.0.6, 3.11 to 3.11.12, 3.9 to 3.9.19 and earlier unsupported versionsVersions fixed:4.1.2, 4.0.7, 3.11.13 and 3.9.20Reported by:Chris PrattCVE identifier:CVE-2023-1402Changes (master):

More info:

Standar resources

Property Value
CVE CVE-2023-1402.

Version history

Version Comments Date
1.0 Advisory issued 2023-06-22
Ministerio de Defensa
Presidencia española. Consejo de la Unión Europea