H5p (Moodle) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2024-02-19. Vendor: Moodle.

CVEs of H5p

• CVE-2024-25980 - CVSS 5.3 (medium), 2024-02-19: Separate Groups mode restrictions were not honored in the H5P attempts report, which would display users from other groups. By default this only provided…
• CVE-2023-5545 - CVSS 5.3 (medium), 2023-11-09: H5P metadata automatically populated the author with the user's username, which could be sensitive information.