Moodle < 3.7.2 Information Disclosure Vulnerability

Moodle is prone to an information disclosure vulnerability. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Softwar...

CVE-2020-1692

CVE-2020-1692 concerns Moodle prior to version 3.7.2, where an information exposure vulnerability allows a user enrolled in the same course to access another user’s service token. The provided documents confirm Moodle as the affected product and the vulnerability class (information disclosure of ...