CVE-2023-5542

2023-11-0920:15:09

CWE-284

CWE-668

[email protected]

web.nvd.nist.gov

data leakage

group membership

students

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

21.1%

JSON

Students in “Only see own membership” groups could see other students in the group, which should be hidden.

Affected configurations

Nvd

Node

moodlemoodleMatch4.2.2

Node

fedoraprojectextra_packages_for_enterprise_linuxMatch7.0

fedoraprojectfedoraMatch38

VendorProductVersionCPE
moodlemoodle4.2.2cpe:2.3:a:moodle:moodle:4.2.2:*:*:*:*:*:*:*
fedoraprojectextra_packages_for_enterprise_linux7.0cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:*
fedoraprojectfedora38cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moodle	moodle	4.2.2	cpe:2.3:a:moodle:moodle:4.2.2:::::::*
fedoraproject	extra_packages_for_enterprise_linux	7.0	cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:::::::*
fedoraproject	fedora	38	cpe:2.3:o:fedoraproject:fedora:38:::::::*