CVE-2023-28336
Publication date 23 March 2023
Last updated 26 August 2025
Ubuntu priority
Description
Insufficient filtering of grade report history made it possible for teachers to access the names of users they could not otherwise access.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| moodle | ||
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial | Ignored end of standard support | |
| 14.04 LTS trusty | Ignored end of standard support |
Severity score breakdown
CVSS version: CVSS v3.0
Base score
4.3 · Medium
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N