Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4645
HistoryJul 24, 2017 - 7:37 a.m.

Grade Information Leakage

2017-07-2407:37:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.002

Percentile

52.7%

Moodle is vulnerable to grade information leakage. The leakage exists because lib/classes/grades_external.php does not enforce moodle/grade:viewhidden capability, allowing the students to view hidden grades through get_grade services.

EPSS

0.002

Percentile

52.7%