CVE-2024-43429

Moodle: user information visibility control issues in gradebook reports

概要

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

影響パッケージ

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.12"},{"introduced":"4.2.0"},{"fixed":"4.2.9"},{"introduced":"4.3.0"},{"fixed":"4.3.6"},{"introduced":"4.4.0"},{"fixed":"4.4.2"}]}]

参照URL

advisory moodle.org
web bugzilla.redhat.com
web nvd.nist.gov