Description Students in "Only see own membership" groups could see other students in the group, which should be hidden. Remediation References CVE-2023-5542 Related Vulnerabilities Ruby on Rails Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3482) phpMyAdmin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-11768) ATutor Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-1583) Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-17569) GlassFish Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-1950) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Tags Missing Update Known Vulnerabilities CWE-668 CVE-2023-5542