Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79310 | patch |
https://bugzilla.redhat.com/show_bug.cgi?id=2243453 | issue tracking third party advisory patch |
https://moodle.org/mod/forum/discuss.php?d=451592 | patch vendor advisory |