CVE-2025-62400
Moodle: hidden group names visible to event creators
概要
Moodle: hidden group names visible to event creators
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.21"},{"introduced":"4.4.0"},{"fixed":"4.4.11"},{"introduced":"4.5.0"},{"fixed":"4.5.7"},{"introduced":"5.0.0"},{"fixed":"5.0.3"}]}]
参照URL
- advisory access.redhat.com
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org