BIT-MOODLE-2025-3647 Moodle: idor when accessing the cohorts report

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

Incorrect Authorization

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Incorrect Authorization via the cohorts report. An attacker can access unauthorized cohort data by exploiting insufficient access control checks. Remediation Upgrade moodle/moodle to version 4.1.18,...