CVE-2025-67857
Moodle: moodle: data exposure of user identifiers in urls
Résumé
Moodle: moodle: data exposure of user identifiers in urls
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in moodle. During anonymous assignment submissions, user identifiers were inadvertently exposed in URLs. This data exposure allows unauthorized viewers to see internal user IDs, compromising the intended anonymity and potentially leading to information disclosure.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
moodle
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.1.21"},{"introduced":"4.4.0"},{"fixed":"4.4.11"},{"introduced":"4.5.0"},{"fixed":"4.5.8"},{"introduced":"5.0.0"},{"fixed":"5.0.4"},{"introduced":"5.1.0"},{"fixed":"5.1.1"}]}]
Références
- advisory access.redhat.com
- advisory nvd.nist.gov
- advisory github.com
- report bugzilla.redhat.com
- web moodle.org
- web github.com