Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4832
HistoryJul 30, 2017 - 10:52 p.m.

Information Disclosure

2017-07-3022:52:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.003

Percentile

70.3%

Moodle is vulnerable to information disclosure. The moodle/course:viewhiddencourses capability is not taken into account before listing hidden courses to authenticated users. Using this flaw, authenticated attackers can find names and summary information about courses.

EPSS

0.003

Percentile

70.3%