Moodle sensitive information disclosure
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-10889US | medium5.3 | — | ||
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted wi… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10889WEB
- https://github.com/moodle/moodle/commit/720d5b3b8559a97b7d6dd77351fb8d1cd8890f14WEB
- https://moodle.org/mod/forum/discuss.php?d=373369WEB
- https://nvd.nist.gov/vuln/detail/CVE-2018-10889ADVISORY
- https://web.archive.org/web/20210124185814/http://www.securityfocus.com/bid/104733WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan