CVE-2024-25980
Msa-24-0003: h5p attempts report did not respect activity group settings
Résumé
Msa-24-0003: h5p attempts report did not respect activity group settings
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.9"},{"introduced":"4.2.0"},{"fixed":"4.2.6"},{"introduced":"4.3.0"},{"fixed":"4.3.3"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org
- web lists.fedoraproject.org
- web moodle.org
- web git.moodle.org