| Package | Affected versions | Patched versions |
|---|---|---|
| moodle | = 1.9.10= 1.9.11= 1.9.2= 1.9.3= 1.9.4= 1.9.5= 1.9.6= 1.9.7= 1.9.8= 1.9.9= 2.0.0= 2.0.1= 2.0.2 |
Moodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly implement associations between teachers and groups, which allows remote authenticated users to read quiz reports of arbitrary students by leveraging the teacher role.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free