GHSA-c767-4whh-v7rw

ghsaUSosv

Moodle has user information visibility control issues in gradebook reports

view advisory published 2024-11-11Licence: CC-BY-4.0

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-43429US	medium5.3OT elevated	0.33% (26th)	—	2024-11-11
A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having ac…

references

External citations — patches, advisories, analysis.

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79541WEB
https://bugzilla.redhat.com/show_bug.cgi?id=2304257WEB
https://github.com/moodle/moodlePACKAGE
https://moodle.org/mod/forum/discuss.php?d=461197WEB
https://nvd.nist.gov/vuln/detail/CVE-2024-43429ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan