Security Announcements

 
 
Picture of Helen Foster
MSA-11-0013: Group/Quiz permissions issue
 
Topic: Quiz review page does not check and enforce separate groups mode
Severity: Major
Versions affected: < 1.9.12 and < 2.0.3
Reported by: Claire Browne
Issue no.: MDL-25122
Solution: Upgrade to the latest version
Workaround: Remove permission to view quiz reports

Description:

When a teacher is assigned to a group they can view quiz reports for all students, not just the students in their group.