165 matches found
Improper Access Control in moodle
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
GHSA-CP8M-H777-G4P3 Improper Access Control in moodle
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25980
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25980
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
Default configuration
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
UBUNTU-CVE-2024-25980
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25980 Msa-24-0003: h5p attempts report did not respect activity group settings
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25980 Msa-24-0003: h5p attempts report did not respect activity group settings
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25980 Msa-24-0003: h5p attempts report did not respect activity group settings
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers...
CVE-2024-25980
CVE-2024-25980 affects Moodle’s H5P attempts report where Separate Groups mode restrictions were not honored, allowing visibility of users from other groups. The issue is described across multiple feeds (NVD entry for CVE-2024-25980, OSV entries, and Nessus/NASL summaries) as a group-visibility f...
GHSA-26FG-V32R-H663 Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
CVE-2023-5545
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
CVE-2023-5545
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
Information disclosure
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
UBUNTU-CVE-2023-5545
H5P metadata automatically populated the author with the user's username, which could be sensitive information...
CVE-2023-5545
CVE-2023-5545: The vulnerability is an information disclosure where H5P metadata auto-populates the author field with the user’s username, potentially exposing sensitive information. Public sources in OSV and GHSA confirm this leakage across Moodle/H5P contexts. The provided materials do not spec...
CVE-2023-5545 Moodle: auto-populated h5p author name causes a potential information leak
H5P metadata automatically populated the author with the user's username, which could be sensitive information...