MSA-26-0016: Missing group access checks in grade web services

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-06-22 11:21 UTC
Importiert: 2026-06-29 14:51 UTC
Quelle-ID: moodle
uid_hash: e50a4f1ced0e7cebb765cd732364d91163755b3a62b8110dc4cce88bea59abfa

Moodle Security Announcements

Inhalt

by Michael Hawkins.

Missing group access checks in some grade web services could allow a user to access grade and user information for students in groups they did not have permission to view.

Severity/Risk: Minor

Versions affected: 5.2, 5.1 to 5.1.4, 5.0 to 5.0.7, 4.5 to 4.5.11 and earlier unsupported versions

Versions fixed: 5.2.1, 5.1.5, 5.0.8 and 4.5.12

Reported by: Paul Holden

CVE identifier: Pending (this will be updated once available)

Changes (main): http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-88667

Tracker issue: MDL-88667 Missing group access checks in grade web services

No data

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Moodle Security Announcements	moodle	vendor_advisory	cms	-	de	https://moodle.org/rss/file.php/154821/7ef1adaa0762dfdd7cd390868b6d9f2b/mod_forum/996/rss.xml

Zurueck zur Eintrags-Liste