163 matches found
CVE-2024-25980
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
UBUNTU-CVE-2024-25980
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25980
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
Default configuration
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25980 Msa-24-0003: h5p attempts report did not respect activity group settings
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25980 Msa-24-0003: h5p attempts report did not respect activity group settings
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25980 Msa-24-0003: h5p attempts report did not respect activity group settings
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25980
CVE-2024-25980 affects Moodle’s H5P attempts report where Separate Groups mode restrictions were not honored, allowing visibility of users from other groups. The issue is described across multiple feeds (NVD entry for CVE-2024-25980, OSV entries, and Nessus/NASL summaries) as a group-visibility f...
GHSA-26FG-V32R-H663 Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
CVE-2023-5545
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
CVE-2023-5545
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
Information disclosure
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
UBUNTU-CVE-2023-5545
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
CVE-2023-5545 Moodle: auto-populated h5p author name causes a potential information leak
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
CVE-2023-5545 Moodle: auto-populated h5p author name causes a potential information leak
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
CVE-2023-5545 Moodle: auto-populated h5p author name causes a potential information leak
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
CVE-2023-5545
CVE-2023-5545: The vulnerability is an information disclosure where H5P metadata auto-populates the author field with the user’s username, potentially exposing sensitive information. Public sources in OSV and GHSA confirm this leakage across Moodle/H5P contexts. The provided materials do not spec...
PT-2023-32167 · H5P · H5P
Name of the Vulnerable Software and Affected Versions: H5P affected versions not specified Description: The issue concerns H5P metadata automatically populating the author field with the user's username, potentially exposing sensitive information. Recommendations: At the moment, there is no...
Fedora 39 : moodle (2023-6bd1586dc5)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-6bd1586dc5 advisory. Latest updates Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...