Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-4303)

Description

Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores (1) password hashes and (2) unspecified "secrets" in backup files, which might allow attackers to obtain sensitive information.

Remediation

References

CVE-2009-4303

Related Vulnerabilities

MySQL CVE-2023-22113 Vulnerability (CVE-2023-22113)

WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.9.63)

Envoy Proxy Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-11767)

WordPress Plugin Add-on SweetAlert Contact Form 7 Unspecified Vulnerability (1.0.7)

MongoDb Improper Authorization Vulnerability (CVE-2025-6713)

Severity

Medium

Classification

CVE-2009-4303 CWE-200