MEDIUM4.3
GHSA-8mm2-m2gp-c6x2
Moodle Improper Access Control vulnerability
Quick fix
GHSA-8mm2-m2gp-c6x2 — moodle/moodle: upgrade to the fixed version with the command below.
composer require moodle/moodle:^4.3.0-rc2Details
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/moodle/moodle
Introduced in:
0Fixed in: 4.3.0-rc2Fix
composer require moodle/moodle:^4.3.0-rc2References
- https://nvd.nist.gov/vuln/detail/CVE-2023-5542[ADVISORY]
- https://github.com/moodle/moodle/commit/b0bb97ee3b481dd85d8f1ed3612f70c9d1939014[WEB]
- https://bugzilla.redhat.com/show_bug.cgi?id=2243441[WEB]
- https://github.com/moodle/moodle[PACKAGE]
- https://moodle.org/mod/forum/discuss.php?d=451583[WEB]
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213[WEB]