What’s Vulnerable › Vulnerabilities

CVE-2023-5542: Moodle: students can view other users in "only see own membership" groups

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-09 · updated 2026-06-17
• Weakness: CWE-284

Description

Students in "Only see own membership" groups could see other students in the group, which should be hidden.

Affected products

• Fedoraproject Extra Packages For Enterprise Linux: 7.0
• Fedoraproject Fedora: 38
• Moodle: 4.2.2

References

• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213
• https://bugzilla.redhat.com/show_bug.cgi?id=2243441
• https://moodle.org/mod/forum/discuss.php?d=451583
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79213
• https://bugzilla.redhat.com/show_bug.cgi?id=2243441
• https://moodle.org/mod/forum/discuss.php?d=451583

Get alerted when CVE-2023-5542 or the next vulnerability affects your stack