CVE-2023-28334
Moodle: users' name enumeration possible via idor on learning plans page
Résumé
Moodle: users' name enumeration possible via idor on learning plans page
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Authenticated users were able to enumerate other users' names via the learning plans page.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"4.0.0"},{"fixed":"4.0.7"},{"introduced":"4.1.0"},{"fixed":"4.1.2"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web moodle.org
- web git.moodle.org