Students can view other users in "only see own membership" groups
CVE-2023-5542

4.3MEDIUM

Key Information:

Vendor: Fedora
Status: moodle; Extra Packages for Enterprise Linux 7; Fedora
Vendor: CVE Published:; 9 November 2023

🔔 Create Fedora Vulnerability Alert

What is CVE-2023-5542?

Students in "Only see own membership" groups could see other students in the group, which should be hidden.

Affected Version(s)

moodle 4.2.3

References

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=...

https://bugzilla.redhat.com/show_bug.cgi?id=2243441

issue-trackingx_refsource_REDHAT

https://moodle.org/mod/forum/discuss.php?d=451583

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 9, 2023
Vulnerability Reserved
Oct 12, 2023

.