CVE-2025-26532
Teachers can evade trusttext config when restoring glossary entries
Summary
Teachers can evade trusttext config when restoring glossary entries
Original description
The description as published by the source.
Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.16"},{"introduced":"4.3.0"},{"fixed":"4.3.10"},{"introduced":"4.4.0"},{"fixed":"4.4.6"},{"introduced":"4.5.0"},{"fixed":"4.5.2"}]}]
References
- advisory moodle.org
- advisory nvd.nist.gov
- advisory github.com
- patch git.moodle.org