Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4597
HistoryJul 19, 2017 - 9:10 a.m.

Information Disclosure

2017-07-1909:10:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.001

Percentile

44.6%

Moodle is vulnerable to information disclosure. The attacks exist because the forum_print_latest_discussions function in mod/forum/lib.php does not check for individual answer-posting requirements. This allows a authenticated user to view the username of the user who last posted without permission.

EPSS

0.001

Percentile

44.6%