CVE-2022-40316

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attemp...

Original description

The description as published by the source.

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"3.9.0"},{"fixed":"3.9.17"},{"introduced":"3.11.0"},{"fixed":"3.11.10"},{"introduced":"4.0.0"},{"fixed":"4.0.4"}]}]

References

advisory nvd.nist.gov
advisory github.com
report bugzilla.redhat.com
web moodle.org