Lucene search

K
osvGoogleOSV:GHSA-FR9M-PJMM-QX9F
HistoryMay 13, 2022 - 1:12 a.m.

Moodle allows attackers to obtain sensitive calendar-event information

2022-05-1301:12:43
Google
osv.dev
5
moodle
calendar
externallib.php
vulnerability
security
remote authenticated users
web-services request

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

47.2%

calendar/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to obtain sensitive calendar-event information via a web-services request.

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

47.2%