CVE-2023-5551: Moodle: forum summary report shows students from other groups when in separate groups mode
Separate Groups mode restrictions were not honored in the forum summary report, which would display users from other groups. This flaw affects versions 4.2 to 4.2.2, 4.1 to 4.1.5, 4.0 to 4.0.10, 3.11 to 3.11.16, 3.9 to 3.9.23 and earlier unsupported versions.
Other sources
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-5551.
What is the severity of CVE-2023-5551?
CVE-2023-5551 has a severity value of 3.3.
How does this vulnerability affect Moodle?
This vulnerability affects Moodle versions up to 3.9.24, 3.11.17, 4.0.11, 4.1.6, and 4.2.3.
How can I fix the CVE-2023-5551 vulnerability?
To fix the CVE-2023-5551 vulnerability, you should update Moodle to version 3.9.24, 3.11.17, 4.0.11, 4.1.6, or 4.2.3.
Where can I find more information about CVE-2023-5551?
You can find more information about CVE-2023-5551 at the following references: [Reference 1](http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79310), [Reference 2](https://bugzilla.redhat.com/show_bug.cgi?id=2243453), [Reference 3](https://moodle.org/mod/forum/discuss.php?d=451592).