CVE-2019-10154

A flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restricted to the current user's conversations...

CVE-2019-10154

A flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restricted to the current user's conversations...

CVE-2019-10154

Moodle is affected by an information disclosure vulnerability (CVE-2019-10154) where the web service that fetches messages is not restricted to the current user’s conversations. Vulnerable in Moodle versions prior to 3.7 and 3.6.4; fixes are in 3.7 and 3.6.4 or later. Exploitation could allow vie...