← CVE Intelligence

CVE-2023-1402

Moodle: course participation report shows roles the user should not see PUBLISHED

Description (CNA)

The course participation report required additional checks to prevent roles being displayed which the user did not have access to view.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 4.1.0 before 4.1.2; affected 4.0.0 before 4.0.7; affected 3.11.0 before 3.11.13; affected 0 before 3.9.20

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.