Description

Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.

Remediation

References

CVE-2012-1169

Related Vulnerabilities

WordPress Plugin Slider by Soliloquy-Responsive Image Slider for WordPress Cross-Site Scripting (2.6.2)

WordPress Plugin Akismet Cross-Site Scripting (3.1.4)

Moodle URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-3850)

WordPress Plugin oQey Gallery 'tbpv_domain' Parameter Cross-Site Scripting (0.2)

Liferay Portal Deserialization of Untrusted Data Vulnerability (CVE-2019-16891)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2012-1169