CVE-2025-26526
Feedback response viewing and deletions did not respect Separate Groups mode
Summary
Feedback response viewing and deletions did not respect Separate Groups mode
Original description
The description as published by the source.
Separate Groups mode restrictions were not factored into permission
checks before allowing viewing or deletion of responses in Feedback
activities.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.16"},{"introduced":"4.3.0"},{"fixed":"4.3.10"},{"introduced":"4.4.0"},{"fixed":"4.4.6"},{"introduced":"4.5.0"},{"fixed":"4.5.2"}]}]
References
- advisory moodle.org
- advisory nvd.nist.gov
- advisory github.com
- patch git.moodle.org