Security announcements

MSA-09-0011: Glossary, database and forum ratings are not verified after submission

 
Picture of Petr Skoda
MSA-09-0011: Glossary, database and forum ratings are not verified after submission
 
Topic: Glossary, database and forum ratings are not verified after submission
Severity: Major
Versions affected: < 1.9.5, < 1.8.9, 1.7.x, 1.6.x
Reported by: Eloy Lafuente
Issue no.: MDL-18058, MDL-18059 and MDL-17365
Solution: upgrade to 1.9.5, 1.8.9 or latest 1.6.9+ and 1.7.7+ weekly builds


Description:
Eloy Lafuente discovered that submitted ratings are not verified after submission, which may alter results and affect final grades.