Description

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

Remediation

References

CVE-2024-43429

Related Vulnerabilities

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-4382)

Apache HTTP Server Other Vulnerability (CVE-2003-0192)

WordPress Plugin MiwoFTP-File & Folder Manager Arbitrary File Download (1.0.5)

WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (0.4.4)

OpenSSL Out-of-bounds Read Vulnerability (CVE-2016-2180)

Severity

Medium

Classification

CVE-2024-43429 CWE-312 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities