Moodle 2.6.11 release notes: Difference between revisions
From MoodleDocs
No edit summary |
David Mudrak (talk | contribs) m (MDLSITE-6551) |
||
Line 17: | Line 17: | ||
* [https://moodle.org/mod/forum/discuss.php?d=313688 MSA-15-0025] Capability to manage own files is not respected in Web Services | * [https://moodle.org/mod/forum/discuss.php?d=313688 MSA-15-0025] Capability to manage own files is not respected in Web Services | ||
=== | ===tablees and improvements=== | ||
* MDL-50380 - | * MDL-50380 - tableed missing parameter error when editing files in wiki | ||
==See also== | ==See also== |
Revision as of 13:06, 9 August 2021
This version of Moodle is no longer supported. You are encouraged to upgrade to a supported version of Moodle.
Releases > Moodle 2.6.11 release notes
Release date: Monday, 11th May 2015
Here is the full list of fixed issues in 2.6.11.
Security issues
- MSA-15-0018 Quiz manual-grading is an XSS risk, but does not declare that
- MSA-15-0019 Possible phishing when redirecting to external site using referer header
- MSA-15-0020 User fullname disclosure through account confirmation link
- MSA-15-0022 Potential XSS risk when returning text entered by student from Web Services
- MSA-15-0023 Suspended user is able to login when confirming email
- MSA-15-0024 User with suspended enrolment can see sections in the navigation tree
- MSA-15-0025 Capability to manage own files is not respected in Web Services
tablees and improvements
- MDL-50380 - tableed missing parameter error when editing files in wiki