CVE-2023-5545

Moodle: auto-populated h5p author name causes a potential information leak

Résumé

Description d'origine

La description telle que publiée par la source (souvent en anglais).

H5P metadata automatically populated the author with the user's username, which could be sensitive information.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.9.24"},{"introduced":"3.11.0"},{"fixed":"3.11.17"},{"introduced":"4.0.0"},{"fixed":"4.0.11"},{"introduced":"4.1.0"},{"fixed":"4.1.6"},{"introduced":"4.2.0"},{"fixed":"4.2.3"}]}]

Références

advisory moodle.org
patch git.moodle.org
patch bugzilla.redhat.com
web nvd.nist.gov