ByteOS Network

NVD Vulnerability Details :

CVE-2025-26526

Analyzed

Source-patrick@puiterwijk.org

Published At-24 Feb, 2025 | 20:15

Updated At-08 Aug, 2025 | 19:40

Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

>>moodle>>Versions from 4.1.0(inclusive) to 4.1.16(exclusive)

>>moodle>>Versions from 4.3.0(inclusive) to 4.3.10(exclusive)

>>moodle>>Versions from 4.4.0(inclusive) to 4.4.6(exclusive)

>>moodle>>Versions from 4.5.0(inclusive) to 4.5.2(exclusive)

CWE ID	Type	Source
CWE-863	Secondary	patrick@puiterwijk.org

Hyperlink	Source	Resource
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79976	patrick@puiterwijk.org	Patch
https://moodle.org/mod/forum/discuss.php?d=466142	patrick@puiterwijk.org	Vendor Advisory