Threats tagged 'ghsa-32c3-9m45-xg9f'

Moodle versions 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 have an information disclosure vulnerability in the core_grades_get_feedback web service. This vulnerability allows non-editing teachers to access grade feedback and user identity information, including email addresses, from other groups due to missing group-membership and enrolment checks.