Description

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

Remediation

References

CVE-2024-43429

Related Vulnerabilities

WordPress Plugin WordPress Comments Import & Export CSV Injection (2.0.4)

Ruby on Rails Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-8162)

WordPress Plugin Tutor LMS Elementor Addons Cross-Site Scripting (2.1.3)

Python Cryptographic Issues Vulnerability (CVE-2013-7040)

IBM RTC CVE-2020-4964 Vulnerability (CVE-2020-4964)

Severity

Medium

Classification

CVE-2024-43429 CWE-312 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities