Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-5551US | low3.3 | — | ||
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups. | ||||
02
references
External citations — patches, advisories, analysis.
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79310WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=2243453WEB
- https://github.com/moodle/moodlePACKAGE
- https://github.com/moodle/moodle/commit/2bb6c551cf2e7be29857db35388911b8179394b0WEB
- https://github.com/moodle/moodle/commit/6de45d2c9f7dd7b24210ab0310c296366a82986aWEB
- https://github.com/moodle/moodle/commit/b91feb0b2328cdda2561d68b8dfe2a129190bc85WEB
- https://moodle.org/mod/forum/discuss.php?d=451592WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-5551ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan