CVE-2023-5542

Students in "Only see own membership" groups could see other students in the group, which should be hidden.
Configurations

Configuration 1 (hide)

cpe:2.3:a:moodle:moodle:4.2.2:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

History

21 Nov 2024, 08:41

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 4.3
v2 : unknown
v3 : 3.3
References () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213 - Patch () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213 - Patch
References () https://bugzilla.redhat.com/show_bug.cgi?id=2243441 - Issue Tracking, Patch, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=2243441 - Issue Tracking, Patch, Third Party Advisory
References () https://moodle.org/mod/forum/discuss.php?d=451583 - Patch, Vendor Advisory () https://moodle.org/mod/forum/discuss.php?d=451583 - Patch, Vendor Advisory

16 Nov 2023, 19:02

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.3
CPE cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:4.2.2:*:*:*:*:*:*:*
CWE CWE-668
First Time Fedoraproject
Moodle
Fedoraproject fedora
Fedoraproject extra Packages For Enterprise Linux
Moodle moodle
References () https://moodle.org/mod/forum/discuss.php?d=451583 - () https://moodle.org/mod/forum/discuss.php?d=451583 - Patch, Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2243441 - () https://bugzilla.redhat.com/show_bug.cgi?id=2243441 - Issue Tracking, Patch, Third Party Advisory
References () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213 - () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213 - Patch

09 Nov 2023, 20:51

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-09 20:15

Updated : 2024-11-21 08:41


NVD link : CVE-2023-5542

Mitre link : CVE-2023-5542

CVE.ORG link : CVE-2023-5542


JSON object : View

Products Affected

fedoraproject

  • fedora
  • extra_packages_for_enterprise_linux

moodle

  • moodle
CWE
CWE-284

Improper Access Control

CWE-668

Exposure of Resource to Wrong Sphere