Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-40316

Fixed upstream EPSS <1%CVSS 4.3

The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to.

Published 2022-09-30 · CVE record · OSV

Products: moodle, fedoraproject extra_packages_for_enterprise_linux, fedoraproject fedora

Fixed upstream

EcosystemPackageFixed in
Packagistmoodle/moodle3.9.17
Packagistmoodle/moodle3.11.10
Packagistmoodle/moodle4.0.4

Distro releases

ReleasePackageFixed in
Ubuntu Pro 16.04 LTSmoodleno fix
Ubuntu Pro 18.04 LTSmoodleno fix