Lucene search
Veracode Vulnerability DatabaseVERACODE:4705HistoryJul 26, 2017 - 8:18 p.m.
E-mail Address Disclosure
2017-07-2620:18:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.002
Percentile
51.6%
Moodle is vulnerable to e-mail address disclosure. Moodle grants excessive authorization through the moodle/course:viewhiddenuserfields. Authenticated users can find student e-mail addresses using a teacher role and looking at the participants list.
Related
prion
prion
Authorization
2016-05-22 20:59:00
nvd
nvd
CVE-2016-2151
2016-05-22 20:59:00
cvelist
cvelist
CVE-2016-2151
2016-05-22 20:00:00
osv
osv
Moodle allows attackers to discover student e-mail addresses
2022-05-13 01:12:38
github
github
Moodle allows attackers to discover student e-mail addresses
2022-05-13 01:12:38
ubuntucve
ubuntucve
CVE-2016-2151
2016-05-22 00:00:00
cve
cve
CVE-2016-2151
2016-05-22 20:59:00
fedora
fedora
[SECURITY] Fedora 22 Update: moodle-2.8.11-1.fc22
2016-03-30 21:25:40
[SECURITY] Fedora 23 Update: moodle-2.9.5-1.fc23
2016-03-30 21:01:09
[SECURITY] Fedora 24 Update: moodle-3.0.3-1.fc24
2016-03-27 00:43:27
nessus
nessus
Moodle < 2.7.13 / 2.8.x < 2.8.11 / 2.9.x < 2.9.5 / 3.0.x < 3.0.3 Multiple Vulnerabilities
2016-04-08 00:00:00
Fedora 23 : moodle-2.9.5-1.fc23 (2016-403715aaec)
2016-04-01 00:00:00
freebsd
freebsd
moodle -- multiple vulnerabilities
2016-03-21 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0122)
2016-03-31 00:00:00
Fedora Update for moodle FEDORA-2016-9
2016-04-11 00:00:00
Fedora Update for moodle FEDORA-2016-403715
2016-04-11 00:00:00
mageia
mageia
Updated moodle packages fix security vulnerability
2016-03-25 09:38:37