BIT-moodle-2024-43429

vendorUSosv

Moodle: user information visibility control issues in gradebook reports

view advisory published 2025-05-02Licence: per source

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-43429USmedium5.3OT elevated—
A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having ac…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan