GitStock

moodle/moodle · Security

Moodle's feedback response viewing and deletions did not respect Separate Groups mode

Open GitHub
GHSA ID
GHSA-pxg4-xjp7-w9c5
CVE ID
CVE-2025-26526
Severity
medium
Published
Updated
CVSS
6.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v3
6.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities.

CWEs

  • CWE-863 · Incorrect Authorization

References