Information Exposure

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Information Exposure due to improper checks of users permissions which allows an attacker to view badge recipient lists that they should not have access to. Remediation Upgrade moodle/moodle to...

OTRS 信息泄露漏洞

OTRS AG OTRSCustomContactFields is an OTRS custom contact fields plugin from OTRS Germany.An information disclosure vulnerability exists in OTRS AG OTRSCustomContactFields, which could be exploited by an attacker to obtain the full list of recipients in a contact field from a customer...