CVE-2023-1402

The course participation report required additional checks to prevent roles being displayed which the user did not have access to view...

CVE-2023-1402

The course participation report required additional checks to prevent roles being displayed which the user did not have access to view...

CVE-2023-1402

CVE-2023-1402 concerns Moodle: the course participation report may reveal roles a user should not view. Connected sources specify affected versions and fixes: Moodle 3.11–3.11.14; 4.0–4.0.8; 4.1–4.1.3; 4.2. PT-2023-25156 and OSV entries describe an XSS-related risk surface but confirm the same pa...

CVE-2023-1402 Moodle: course participation report shows roles the user should not see

The course participation report required additional checks to prevent roles being displayed which the user did not have access to view...