2243441 – (CVE-2023-5542, MSA-23-0034) CVE-2023-5542 moodle: Students can view other users in "Only see own membership" groups

Bug 2243441 (CVE-2023-5542, MSA-23-0034) - CVE-2023-5542 moodle: Students can view other users in "Only see own membership" groups

Summary: CVE-2023-5542 moodle: Students can view other users in "Only see own membersh...

Attachments	(Terms of Use)

Description Robb Gatica 2023-10-12 00:03:02 UTC

Students in "Only see own membership" groups could see other students in the group, which should be hidden. This flaw affects version 4.2.2.

Comment 1 Nick Tait 2023-10-18 18:46:35 UTC

https://moodle.org/mod/forum/discuss.php?d=451583

Comment 2 Nick Tait 2023-10-18 20:45:14 UTC

Created moodle tracking bugs for this issue:

Affects: epel-7 [bug 2244902]
Affects: fedora-all [bug 2244903]

Note You need to log in before you can comment on or make changes to this bug.