Lucene search
GoogleOSV:GHSA-MR97-GVVG-RHGHHistoryMay 13, 2022 - 1:13 a.m.
Moodle Exposes Sensitive User Information
2022-05-1301:13:06
Google
osv.dev
6
moodle
security
user information
remote access
Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to “Enrolled users” under the Users Settings section.
References
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-31923
openwall.com/lists/oss-security/2012/05/23/2
github.com/moodle/moodle
github.com/moodle/moodle/commit/a645b79113b2ee7881b6bdae64a0c2a9f04db5c7
github.com/moodle/moodle/commit/ce13ea6ceb15f00c3cc6d40d79b06be39de7987a
github.com/moodle/moodle/commit/cfaa50a61d61719c65aa7e26f5444852931e07b6
nvd.nist.gov/vuln/detail/CVE-2012-2353
Related
veracode
veracode
Information Disclosure Via Privilege Escalation
2017-06-01 02:17:58
prion
prion
Stack overflow
2012-07-21 03:38:00
cvelist
cvelist
CVE-2012-2353
2012-07-21 01:00:00
cve
cve
CVE-2012-2353
2012-07-21 03:38:55
nvd
nvd
CVE-2012-2353
2012-07-21 03:38:55
ubuntucve
ubuntucve
CVE-2012-2353
2012-07-21 00:00:00
github
github
Moodle Exposes Sensitive User Information
2022-05-13 01:13:06
nessus
nessus
Moodle 2.1.x < 2.1.6 / 2.2.x < 2.2.3 Multiple Vulnerabilities
2015-04-20 00:00:00
Fedora 16 : moodle-2.0.10-1.fc16 (2012-11028)
2012-08-02 00:00:00
Fedora 17 : moodle-2.2.4-1.fc17 (2012-11039)
2012-08-02 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: moodle-2.2.4-1.fc17
2012-08-01 22:28:41
[SECURITY] Fedora 16 Update: moodle-2.0.10-1.fc16
2012-08-01 22:27:44
[SECURITY] Fedora 15 Update: moodle-1.9.18-1.fc15
2012-06-02 03:58:35
openvas
openvas
Fedora Update for moodle FEDORA-2012-11028
2012-08-03 00:00:00
Fedora Update for moodle FEDORA-2012-11039
2012-08-30 00:00:00
Fedora Update for moodle FEDORA-2012-11028
2012-08-03 00:00:00