CVE-2025-26526
Feedback response viewing and deletions did not respect Separate Groups mode
Separate Groups mode restrictions were not factored into permission
checks before allowing viewing or deletion of responses in Feedback
activities.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
Moodle Project · moodleWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →