GHSA-385f-vgq7-8hhxMediumCVSS 4.3

Moodle No groups filtering in H5P activity attempts report

Published
October 1, 2022
Last Modified
April 23, 2024

🔗 CVE IDs covered (1)

CVE-2022-40316 →

📋 Description

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to.

🎯 Affected products3

  • composer/moodle/moodle:>= 3.9, < 3.9.17
  • composer/moodle/moodle:>= 3.11, < 3.11.10
  • composer/moodle/moodle:>= 4.0, < 4.0.4

🔗 References (4)