Lucene search
GoogleOSV:BIT-MOODLE-2023-28334HistoryMar 06, 2024 - 11:00 a.m.
BIT-moodle-2023-28334
2024-03-0611:00:05
Google
osv.dev
9
authenticated users
enumerate
learning plans
security vulnerability
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
21.0%
Authenticated users were able to enumerate other users’ names via the learning plans page.
Related
veracode
veracode
Information Disclosure
2023-03-29 04:45:25
osv
osv
CVE-2023-28334
2023-03-23 21:15:20
vulnrichment
vulnrichment
cvelist
cvelist
prion
prion
Code injection
2023-03-23 21:15:00
nvd
nvd
CVE-2023-28334
2023-03-23 21:15:20
ubuntucve
ubuntucve
CVE-2023-28334
2023-03-23 00:00:00
github
github
openvas
openvas
Moodle 4.0 < 4.0.7, 4.1 < 4.1.2 IDOR Vulnerability
2023-03-24 00:00:00
cve
cve
CVE-2023-28334
2023-03-23 21:15:20
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
21.0%
Related for OSV:BIT-MOODLE-2023-28334