Non notée
CVE-2020-25703 The participants table download in Moodle always included user emails, but should have only done so when users' emails…
Description
The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5 and 3.7 to 3.7.8. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, and 3.10.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Moodle | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- moodle.org moodle.org
- FEDORA-2020-304aa2c365 lists.fedoraproject.org
- FEDORA-2020-db73e37548 lists.fedoraproject.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Moodle
Les 89 CVE de Moodle →
CVE-2022-40208
In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential…
4.3
Moyenne
CVE-2021-36402
In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration…
5.3
Moyenne
CVE-2021-36395
In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion…
7.5
Élevée
CVE-2021-36392
In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses
Non notée