Lucene search
+L

2 matches found

Veracode
Veracode
added 2017/07/26 7:53 p.m.22 views

Course Name Disclosure

Moodle is vulnerable to course name disclosure. Authenticated attackers can leverage a flaw in admin/tool/monitor/lib.php to find hidden course names by subscribing to rules. These attacks are possible because moodle ignores the moodle/course:viewhiddencourses capability...

4.3CVSS6.1AI score0.01693EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder