CVE-2024-25980

Msa-24-0003: h5p attempts report did not respect activity group settings

概要

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.9"},{"introduced":"4.2.0"},{"fixed":"4.2.6"},{"introduced":"4.3.0"},{"fixed":"4.3.3"}]}]

参照URL

advisory moodle.org
patch git.moodle.org
report bugzilla.redhat.com
web lists.fedoraproject.org
web nvd.nist.gov