Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-pxg4-xjp7-w9c5: Moodle's feedback response viewing and deletions did not respect Separate Groups mode

Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities.

ghsa
#vulnerability#web#git

Skip to content

Navigation Menu

    • GitHub Copilot

      Write better code with AI

    • Security

      Find and fix vulnerabilities

    • Actions

      Automate any workflow

    • Codespaces

      Instant dev environments

    • Issues

      Plan and track work

    • Code Review

      Manage code changes

    • Discussions

      Collaborate outside of code

    • Code Search

      Find more, search less

  • Explore

    • Learning Pathways
    • Events & Webinars
    • Ebooks & Whitepapers
    • Customer Stories
    • Partners
    • Executive Insights
    • GitHub Sponsors

      Fund open source developers

*   The ReadME Project
    
    GitHub community articles
    • Enterprise platform

      AI-powered developer platform

  • Pricing

Provide feedback

Saved searches****Use saved searches to filter your results more quickly

Sign up

  1. GitHub Advisory Database
  2. GitHub Reviewed
  3. CVE-2025-26526

Moodle’s feedback response viewing and deletions did not respect Separate Groups mode

Moderate severity GitHub Reviewed Published Feb 24, 2025 to the GitHub Advisory Database • Updated Feb 24, 2025

Package

composer moodle/moodle (Composer)

Affected versions

>= 4.5.0-beta, < 4.5.2

>= 4.4.0-beta, < 4.4.6

>= 4.3.0-beta, < 4.3.10

< 4.1.16

Patched versions

4.5.2

4.4.6

4.3.10

4.1.16

Description

Published to the GitHub Advisory Database

Feb 24, 2025

Last updated

Feb 24, 2025

EPSS score

ghsa: Latest News

GHSA-c6gw-w398-hv78: DoS in go-jose Parsing