Lucene search
GoogleOSV:CVE-2023-28334HistoryMar 23, 2023 - 9:15 p.m.
CVE-2023-28334
2023-03-2321:15:20
Google
osv.dev
8
enumeration
learning plans
authenticated users
software
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.9
Confidence
High
EPSS
0.001
Percentile
21.0%
Authenticated users were able to enumerate other users’ names via the learning plans page.
Related
veracode
veracode
Information Disclosure
2023-03-29 04:45:25
vulnrichment
vulnrichment
cvelist
cvelist
prion
prion
Code injection
2023-03-23 21:15:00
nvd
nvd
CVE-2023-28334
2023-03-23 21:15:20
ubuntucve
ubuntucve
CVE-2023-28334
2023-03-23 00:00:00
github
github
osv
osv
BIT-moodle-2023-28334
2024-03-06 11:00:05
openvas
openvas
Moodle 4.0 < 4.0.7, 4.1 < 4.1.2 IDOR Vulnerability
2023-03-24 00:00:00
cve
cve
CVE-2023-28334
2023-03-23 21:15:20
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.9
Confidence
High
EPSS
0.001
Percentile
21.0%
Related for OSV:CVE-2023-28334