CVE-2024-43429
Moodle: user information visibility control issues in gradebook reports
Résumé
Moodle: user information visibility control issues in gradebook reports
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.12"},{"introduced":"4.2.0"},{"fixed":"4.2.9"},{"introduced":"4.3.0"},{"fixed":"4.3.6"},{"introduced":"4.4.0"},{"fixed":"4.4.2"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- report bugzilla.redhat.com
- web moodle.org