NIXPKGS-2026-0030
published on 18 Jan 2026
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse removed package moodle-dl
- @LeSuisse removed maintainer @freezeboy
- @LeSuisse accepted
- @LeSuisse published on GitHub
Moodle: external cohort search service leaks system cohort data
A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.
Affected products
moodle
- <4.1.21
- <4.5.7
- <4.4.11
- <5.0.3
Package maintainers
Ignored maintainers (1)
-
@freezeboy freezeboy