CVE-2024-25981

Separate Groups mode restrictions were not honored when performing a forum export, which would export forum data for all groups. By default this only provided additional access to non-editing teachers.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

History

23 Jan 2025, 16:45

Type Values Removed Values Added
CPE cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
First Time Fedoraproject fedora
Fedoraproject
Moodle moodle
Moodle
References () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80504 - () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80504 - Patch
References () https://bugzilla.redhat.com/show_bug.cgi?id=2264097 - () https://bugzilla.redhat.com/show_bug.cgi?id=2264097 - Issue Tracking
References () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/ - Mailing List
References () https://moodle.org/mod/forum/discuss.php?d=455637 - () https://moodle.org/mod/forum/discuss.php?d=455637 - Vendor Advisory

21 Nov 2024, 09:01

Type Values Removed Values Added
References () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80504 - () http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-80504 -
References () https://bugzilla.redhat.com/show_bug.cgi?id=2264097 - () https://bugzilla.redhat.com/show_bug.cgi?id=2264097 -
References () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/ -
References () https://moodle.org/mod/forum/discuss.php?d=455637 - () https://moodle.org/mod/forum/discuss.php?d=455637 -

29 Feb 2024, 03:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXGBYJ43BUEBUAQZU3DT5I5A3YLF47CB/ -

20 Feb 2024, 19:50

Type Values Removed Values Added
Summary
  • (es) Las restricciones del modo de grupos separados no se respetaban al realizar una exportación de foro, que exportaría datos del foro para todos los grupos. De forma predeterminada, esto solo proporcionaba acceso adicional a los profesores que no eran editores.

19 Feb 2024, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-19 17:15

Updated : 2025-01-23 16:45


NVD link : CVE-2024-25981

Mitre link : CVE-2024-25981

CVE.ORG link : CVE-2024-25981


JSON object : View

Products Affected

fedoraproject

  • fedora

moodle

  • moodle
CWE
CWE-284

Improper Access Control

NVD-CWE-noinfo