Description

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.

Remediation

References

CVE-2024-43427

Related Vulnerabilities

Liferay DXP Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2025-43808)

PrestaShop Improper Authentication Vulnerability (CVE-2020-15079)

WordPress Plugin NotificationX-WooCommerce Sales Notification Popup, Custom & Live Sales Notification, FOMO, Social Proof, Announcement Banner & Sticky Notification Bar SQL Injection (2.3.11)

WordPress Plugin Active Products Tables for WooCommerce. Best and Professional products tables for WooCommerce store Cross-Site Scripting (1.0.3.1)

Liferay DXP Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-43814)

Severity

Low

Classification

CVE-2024-43427 CWE-922 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities