Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4721
HistoryJul 26, 2017 - 11:26 p.m.

Information Disclosure

2017-07-2623:26:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.001

Percentile

34.9%

Moodle is vulnerable to information disclosure. The library does not properly enforce the moodle/badges:viewbadges capability, allowing an authenticated malicious user to view sensitive information through badges/overview.php or badges/view.php.