CVE-2023-28334
Moodle: users' name enumeration possible via idor on learning plans page
Summary
Moodle: users' name enumeration possible via idor on learning plans page
Original description
The description as published by the source.
Authenticated users were able to enumerate other users' names via the learning plans page.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.0.7"},{"introduced":"4.1.0"},{"fixed":"4.1.2"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web moodle.org
- web git.moodle.org