← Zuruck zu CVEs
CVE-2025-26526
MEDIUM6.5
Beschreibung
Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities.
CVE Details
CVSS v3.1 Bewertung6.5
SchweregradMEDIUM
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionNONE
Veroffentlicht2/24/2025
Zuletzt geandert8/8/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
moodle:moodle
Schwachen (CWE)
CWE-863
Referenzen
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976(patrick@puiterwijk.org)
https://moodle.org/mod/forum/discuss.php?d=466142(patrick@puiterwijk.org)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.