| Package | Affected versions | Patched versions |
|---|---|---|
| moodle | = 2.3.0= 2.3.1= 2.3.2= 2.3.3= 2.4.0 |
lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments (aka feedback comments) of arbitrary users via a crafted URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free