← Retour aux CVEs
CVE-2025-26526
MEDIUM6.5
Description
Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities.
Details CVE
Score CVSS v3.16.5
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie2/24/2025
Derniere modification8/8/2025
Sourcenvd
Observations honeypot0
Produits affectes
moodle:moodle
Faiblesses (CWE)
CWE-863
References
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976(patrick@puiterwijk.org)
https://moodle.org/mod/forum/discuss.php?d=466142(patrick@puiterwijk.org)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.