Loading HuntDB...

GHSA-8mm2-m2gp-c6x2

GitHub Security Advisory

Moodle Improper Access Control vulnerability

✓ GitHub Reviewed MODERATE Has CVE

Advisory Details

Students in "Only see own membership" groups could see other students in the group, which should be hidden.

Affected Packages

Packagist moodle/moodle
Affected versions: 0 (fixed in 4.3.0-rc2)

Related CVEs

Key Information

GHSA ID
GHSA-8mm2-m2gp-c6x2
Published
November 9, 2023 9:30 PM
Last Modified
November 17, 2023 9:57 PM
CVSS Score
5.0 /10
Primary Ecosystem
Packagist
Primary Package
moodle/moodle
GitHub Reviewed
✓ Yes

Dataset

Last updated: September 12, 2025 6:34 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.