CVE-2025-62400
Moodle: hidden group names visible to event creators
Résumé
Moodle: hidden group names visible to event creators
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.21"},{"introduced":"4.4.0"},{"fixed":"4.4.11"},{"introduced":"4.5.0"},{"fixed":"4.5.7"},{"introduced":"5.0.0"},{"fixed":"5.0.3"}]}]
Références
- advisory access.redhat.com
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web git.moodle.org