VYPR

moodle-block_configurablereports

by Jleyva

CVEs (1)

  • CVE-2026-113607MedOct 20, 2026
    risk 0.35cvss 6.5epss —

    Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the block_configurable_reports_get_report_data web service. When check_permissions fails, the function only adds a…