CVE-2024-25980
Msa-24-0003: h5p attempts report did not respect activity group settings
Summary
Msa-24-0003: h5p attempts report did not respect activity group settings
Original description
The description as published by the source.
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.9"},{"introduced":"4.2.0"},{"fixed":"4.2.6"},{"introduced":"4.3.0"},{"fixed":"4.3.3"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web lists.fedoraproject.org
- web moodle.org
- web git.moodle.org