GHSA-wx87-h539-4775

ghsaUSosv

Moodle Information Disclosure vulnerability

view advisory published 2022-03-12Licence: CC-BY-4.0

It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-32473US	medium5.3	1.03% (64th)	—	2022-03-11
It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and e…

references

External citations — patches, advisories, analysis.

https://github.com/moodle/moodlePACKAGE
https://moodle.org/mod/forum/discuss.php?d=422307WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-32473ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan