Description

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

Remediation

References

CVE-2024-43429

Related Vulnerabilities

Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-4465)

WordPress Plugin Shariff for WordPress Cross-Site Scripting (1.0.7)

Django CVE-2024-24680 Vulnerability (CVE-2024-24680)

TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-59018)

WordPress Plugin WooCommerce Cross-Site Scripting (2.0.17)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-312 CVE-2024-43429