NetSight
IP …
medium4.3

CVE-2023-28336

Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access.

Impact

Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access.

Affected products

VendorProductAffected versions
MoodleMoodle
after 3.9.0 before 3.9.20
after 3.11.0 before 3.11.13
after 4.0.0 before 4.0.7
Versions 3.9.0, 3.11.0, 4.0.0
FedoraprojectFedora
Version 36

Weakness classification

CWE-200CWE-668

References