CVE-2023-5551

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-5551
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5551.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-5551
Aliases
Downstream
Published
2023-11-09T19:39:11.940Z
Modified
2026-07-15T01:48:50.637754505Z
Severity
  • 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
Moodle: forum summary report shows students from other groups when in separate groups mode
Details

Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "4.2.0"
                },
                {
                    "fixed": "4.2.3"
                },
                {
                    "introduced": "4.1.0"
                },
                {
                    "fixed": "4.1.6"
                },
                {
                    "introduced": "4.0.0"
                },
                {
                    "fixed": "4.0.11"
                },
                {
                    "introduced": "3.11.0"
                },
                {
                    "fixed": "3.11.17"
                },
                {
                    "fixed": "3.9.24"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "fedora",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5551.json",
    "cwe_ids": [
        "CWE-200"
    ]
}
References

Affected packages

Git / github.com/moodle/moodle

Affected ranges

Type
GIT
Repo
https://github.com/moodle/moodle
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
71b514944365362ceaac1018bf7970c2b080c0f2
Introduced
94f2d3fc4b974c5c7d500988c56b7ca15f58d7ec
Fixed
a11ca2d1ff661ed37abb499e1fa37ab51324ca5a
Introduced
8b359ad7a63cf219110bca80552fe3d4ea2a635d
Fixed
b72ce02928c561588861d24330b2c3619f76d116
Introduced
0ea3d45e04c3d54a3a472ddcb11606b30e227c50
Fixed
b0a7bc3f42a0db2a0bf66b93623534f5f9af3294
Introduced
ae4efa96ee8169a848c141ad21690165ea791552
Fixed
97130393545528109fb8ce9d9e45e3f84fed3880
Database specific 
{
    "cpe": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.9.24"
        },
        {
            "introduced": "3.11.0"
        },
        {
            "fixed": "3.11.17"
        },
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.0.11"
        },
        {
            "introduced": "4.1.0"
        },
        {
            "fixed": "4.1.6"
        },
        {
            "introduced": "4.2.0"
        },
        {
            "fixed": "4.2.3"
        }
    ]
}

Affected versions

v1.*
v1.0.0
v1.0.1
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.0.6
v1.0.7
v1.0.8
v1.0.9
v1.1.0
v1.1.1
v1.2.0
v1.2.1
v1.3.0
v2.*
v2.0.0
v2.0.0-rc1
v2.0.0-rc2
v2.0.1
v2.1.0
v2.2.0
v2.2.0-beta
v2.2.0-rc1
v2.3.0
v2.3.0-beta
v2.3.0-rc1
v2.4.0
v2.4.0-beta
v2.4.0-rc1
v2.5.0
v2.5.0-beta
v2.5.0-rc1
v2.6.0
v2.6.0-beta
v2.6.0-rc1
v2.7.0
v2.7.0-beta
v2.7.0-rc1
v2.7.0-rc2
v2.8.0
v2.8.0-beta
v2.8.0-rc1
v2.8.0-rc2
v2.9.0
v2.9.0-beta
v2.9.0-rc1
v2.9.0-rc2
v3.*
v3.0.0
v3.0.0-beta
v3.0.0-rc1
v3.0.0-rc2
v3.0.0-rc3
v3.0.0-rc4
v3.1.0
v3.1.0-beta
v3.1.0-rc1
v3.1.0-rc2
v3.11.0
v3.11.1
v3.11.10
v3.11.11
v3.11.12
v3.11.13
v3.11.14
v3.11.15
v3.11.16
v3.11.2
v3.11.3
v3.11.4
v3.11.5
v3.11.6
v3.11.7
v3.11.8
v3.11.9
v3.2.0
v3.2.0-beta
v3.2.0-rc1
v3.2.0-rc2
v3.2.0-rc3
v3.2.0-rc4
v3.2.0-rc5
v3.3.0
v3.3.0-beta
v3.3.0-rc1
v3.3.0-rc2
v3.3.0-rc3
v3.4.0
v3.4.0-beta
v3.4.0-rc1
v3.4.0-rc2
v3.4.0-rc3
v3.5.0
v3.5.0-beta
v3.5.0-rc1
v3.6.0
v3.6.0-beta
v3.6.0-rc1
v3.6.0-rc2
v3.6.0-rc3
v3.7.0
v3.7.0-beta
v3.7.0-rc1
v3.7.0-rc2
v3.8.0
v3.8.0-beta
v3.8.0-rc1
v3.9.0
v3.9.0-beta
v3.9.0-rc1
v3.9.0-rc2
v3.9.0-rc3
v3.9.1
v3.9.10
v3.9.11
v3.9.12
v3.9.13
v3.9.14
v3.9.15
v3.9.16
v3.9.17
v3.9.18
v3.9.19
v3.9.2
v3.9.20
v3.9.21
v3.9.22
v3.9.23
v3.9.3
v3.9.4
v3.9.5
v3.9.6
v3.9.7
v3.9.8
v3.9.9
v4.*
v4.0.0
v4.0.1
v4.0.10
v4.0.2
v4.0.3
v4.0.4
v4.0.5
v4.0.6
v4.0.7
v4.0.8
v4.0.9
v4.1.0
v4.1.1
v4.1.2
v4.1.3
v4.1.4
v4.1.5
v4.2.0
v4.2.1
v4.2.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5551.json"