CVE-2023-28334

Moodle: users' name enumeration possible via idor on learning plans page

概要

取得元が公開している説明をそのまま載せています (多くは英語)。

Authenticated users were able to enumerate other users' names via the learning plans page.

出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Bitnami moodle

[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.0.7"},{"introduced":"4.1.0"},{"fixed":"4.1.2"}]}]