Описание
Moodle may display roles to users who don't have access to them
The course participation report required additional checks to prevent roles being displayed which the user did not have access to view.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2023-1402
- https://github.com/moodle/moodle/commit/f0a557bffbdb450648d0e4cedb391d14d8a0a253
- https://bugzilla.redhat.com/show_bug.cgi?id=2179427
- https://git.moodle.org/gw?p=moodle.git;a=commitdiff;h=f0a557bffbdb450648d0e4cedb391d14d8a0a253
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3QZN34VSF4HTCW3C3ZP2OZYSLYUKADPF
- https://moodle.org/mod/forum/discuss.php?d=445069
Пакеты
moodle/moodle
>= 4.1.0, < 4.1.2
4.1.2
moodle/moodle
>= 4.0.0, < 4.0.7
4.0.7
moodle/moodle
>= 3.11.0, < 3.11.13
3.11.13
moodle/moodle
< 3.9.20
3.9.20
Связанные уязвимости
The course participation report required additional checks to prevent roles being displayed which the user did not have access to view.
The course participation report required additional checks to prevent roles being displayed which the user did not have access to view.
The course participation report required additional checks to prevent ...
ALT-PU-2023-2057: package `moodle` update to version 3.11.15-alt1
ALT-PU-2023-2012: package `moodle` update to version 3.11.15-alt1