Threats tagged 'bit-moodle-2025-26526'

Moodle versions prior to fixed releases did not enforce Separate Groups mode restrictions when viewing or deleting responses in Feedback activities. This allowed users to access or remove feedback responses outside their assigned groups, violating intended access controls. The issue affects multiple Moodle 4.x versions and has been addressed in official patches.