CVE-2013-2080

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

Design/Logic Flaw

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

CVE-2013-2080

The coregrade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report...

CVE-2013-2080

The CVE-2013-2080 entry concerns Moodle’s core_grade component where hidden grades are not properly accounted for. The vulnerability affects Moodle versions: 2.2.10 and 2.3.x prior to 2.3.7, and 2.4.x prior to 2.4.4. A remote authenticated user (via the student role) can read the Gradebook Overvi...