Vulnerability CVE-2022-40316
Published: 2022-09-30

Description:
The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to.

 References:
https://moodle.org/mod/forum/discuss.php?d=438395
https://bugzilla.redhat.com/show_bug.cgi?id=2128151
Copyright 2026, cxsecurity.com

 

Back to Top