Total vulnerabilities in the database
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories.
| Software | From | Fixed in |
|---|---|---|
| moodle / moodle | 3.1.0 | 3.1.13 |
| moodle / moodle | 3.3.0 | 3.3.7 |
| moodle / moodle | 3.4.0 | 3.4.4 |
| moodle / moodle | 3.5.0 | 3.5.1 |