Description
Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected.
Remediation
References
Related Vulnerabilities
LimeSurvey Incorrect Default Permissions Vulnerability (CVE-2019-16186)
Oracle Database Server CVE-2010-0852 Vulnerability (CVE-2010-0852)
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0790)
WordPress Plugin NOSpamPTI SQL Injection (2.1)
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9516)