PT-2023-8912 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to the Separate Groups mode in the forum summary report, where restrictions were not properly enforced, allowing the display of users from other groups. This could...

Information Disclosure

moodle/moodle is vulnerable to information disclosure. The vulnerability exists because the activity attempts report does not properly filter by groups in the getreport function of manager.php, allowing an attacker to reveal the information about attempts or users in groups to non-editing teacher...

Moodle No groups filtering in H5P activity attempts report

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to...

UBUNTU-CVE-2022-40316

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to...