Lucene search

GoogleOSV:BIT-MOODLE-2022-30598

HistoryMar 06, 2024 - 11:04 a.m.

BIT-moodle-2022-30598

2024-03-0611:04:27

Google

osv.dev

moodle

global search

author information

access control

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.2%

JSON

A flaw was found in moodle where global search results could include author information on some activities where a user may not otherwise have access to it.

CPENameOperatorVersion
moodlege3.9.0
moodlelt3.10.11
moodlege3.11.0
moodlelt3.9.14
moodlele4.0.0
moodlege3.10.0
moodlege4.0.0
moodlelt3.11.7

Name	Operator	Version
moodle	ge	3.9.0
moodle	lt	3.10.11
moodle	ge	3.11.0
moodle	lt	3.9.14
moodle	le	4.0.0
moodle	ge	3.10.0
moodle	ge	4.0.0
moodle	lt	3.11.7

References

git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-71623

bugzilla.redhat.com/show_bug.cgi?id=2083592

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGF35EN5K2R6X3NTY3XPZSJ3UDASMXI6/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PIMSIRKCFLIC646K4GMUSZU7THOUVPAJ/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCTWSE3JDMSYL7DPCMXMMJEXZSS6VIA5/

moodle.org/mod/forum/discuss.php?d=434580