Lucene search
Veracode Vulnerability DatabaseVERACODE:39975HistoryMar 29, 2023 - 4:45 a.m.
Information Disclosure
2023-03-2904:45:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
information disclosure
authenticated user
sensitive information
learning plans page
EPSS
0.001
Percentile
21.0%
moodle/moodle is vulnerable to Information Disclosure. The vulnerability exists because authenticated user privileges are not properly validated in page_helper.php which allows an attacker to access sensitive information and enumerate other users names via the learning plans page.
Related
osv
osv
CVE-2023-28334
2023-03-23 21:15:20
BIT-moodle-2023-28334
2024-03-06 11:00:05
vulnrichment
vulnrichment
cvelist
cvelist
prion
prion
Code injection
2023-03-23 21:15:00
nvd
nvd
CVE-2023-28334
2023-03-23 21:15:20
ubuntucve
ubuntucve
CVE-2023-28334
2023-03-23 00:00:00
github
github
openvas
openvas
Moodle 4.0 < 4.0.7, 4.1 < 4.1.2 IDOR Vulnerability
2023-03-24 00:00:00
cve
cve
CVE-2023-28334
2023-03-23 21:15:20