CVE-2022-40316

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attemp...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.17"},{"introduced":"3.11.0"},{"fixed":"3.11.10"},{"introduced":"4.0.0"},{"fixed":"4.0.4"}]}]

Références

advisory bugzilla.redhat.com
advisory moodle.org
web nvd.nist.gov