Lucene search

GitHub Advisory DatabaseGHSA-W2PJ-R8M3-R4JC

HistoryMay 13, 2022 - 1:12 a.m.

Moodle Information Disclosure

2022-05-1301:12:49

CWE-200

GitHub Advisory Database

github.com

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

20.7%

JSON

In Moodle 3.3, the course overview block reveals activities in hidden courses.

CPENameOperatorVersion
moodle/moodlelt3.3.1

CPE	Name	Operator	Version
	moodle/moodle	lt	3.3.1

References

github.com/advisories/GHSA-w2pj-r8m3-r4jc

github.com/moodle/moodle/commit/2fe7f706d7567babd6c7aeb6612f231d2ce2fb2f

moodle.org/mod/forum/discuss.php?d=355555

nvd.nist.gov/vuln/detail/CVE-2017-7531

web.archive.org/web/20210124081202/www.securityfocus.com/bid/99618

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

20.7%

JSON

Related for GHSA-W2PJ-R8M3-R4JC