Description
Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided additional access to non-editing teachers.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP CSV Unspecified Vulnerability (1.7.8.0)
WordPress Plugin Slimstat Analytics Security Bypass (5.0.5.1)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5481)
WordPress Plugin TRADIES Information Disclosure (2.2.6)
WordPress Plugin iThemes Security (formerly Better WP Security) Unspecified Vulnerability (6.9.0)