Description

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to

Remediation

References

CVE-2012-1155

Related Vulnerabilities

WordPress MU 'wp-admin/wpmu-blogs.php' Multiple Cross-Site Scripting Vulnerabilities (1.0 - 2.5.1)

Moodle 7PK - Security Features Vulnerability (CVE-2015-5331)

WordPress Plugin AI ChatBot Directory Traversal (4.9.2)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44950)

Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-6188)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2012-1155