Description
The blind-marking implementation in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote authenticated users to de-anonymize student identities by (1) using a screen reader or (2) reading the HTML source.
Remediation
References
Related Vulnerabilities
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1161)
TYPO3 Uncontrolled Recursion Vulnerability (CVE-2022-23500)
Jenkins Improper Input Validation Vulnerability (CVE-2018-1999001)
WordPress Plugin Add From Server Cross-Site Request Forgery (3.3.1)
Apache Denial of service in mod_lua r:parsebody Vulnerability (CVE-2022-29404)