CVE-2023-5551

Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

History

17 Nov 2023, 17:00

Type Values Removed Values Added
CWE NVD-CWE-noinfo
First Time Moodle moodle
Fedoraproject extra Packages For Enterprise Linux
Fedoraproject fedora
Moodle
Fedoraproject
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 3.3
References () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79310 - () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79310 - Patch
References () https://bugzilla.redhat.com/show_bug.cgi?id=2243453 - () https://bugzilla.redhat.com/show_bug.cgi?id=2243453 - Issue Tracking, Patch, Third Party Advisory
References () https://moodle.org/mod/forum/discuss.php?d=451592 - () https://moodle.org/mod/forum/discuss.php?d=451592 - Patch, Vendor Advisory
CPE cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:*

09 Nov 2023, 20:51

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-09 20:15

Updated : 2023-12-10 15:26


NVD link : CVE-2023-5551

Mitre link : CVE-2023-5551

CVE.ORG link : CVE-2023-5551


JSON object : View

Products Affected

fedoraproject

  • fedora
  • extra_packages_for_enterprise_linux

moodle

  • moodle
CWE
NVD-CWE-noinfo CWE-200

Exposure of Sensitive Information to an Unauthorized Actor