GHSA-385f-vgq7-8hhx
GitHub Security Advisory
Moodle No groups filtering in H5P activity attempts report
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to.
Affected Packages
Packagist
moodle/moodle
Affected versions:
3.9
(fixed in 3.9.17)
Packagist
moodle/moodle
Affected versions:
3.11
(fixed in 3.11.10)
Packagist
moodle/moodle
Affected versions:
4.0
(fixed in 4.0.4)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 31, 2025 6:36 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.