Non notée
CVE-2017-15110 In Moodle 3.x, students can find out email addresses of other students in the same course
Description
In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Moodle 3.x | Versions non publiées |
Références
- 101909 www.securityfocus.com
- moodle.org moodle.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Moodle 3.x
Les 10 CVE de Moodle 3.x →
CVE-2018-1042
Moodle 3.x has Server Side Request Forgery in the filepicker
Non notée
CVE-2018-1043
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames
Non notée
CVE-2018-1044
In Moodle 3.x, quiz web services allow students to see quiz results when it is prohibited in the settings
Non notée
CVE-2018-1045
In Moodle 3.x, there is XSS via a calendar event name
Non notée