Description

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.

Remediation

References

CVE-2018-10889

Related Vulnerabilities

WordPress Plugin Check & Log Email Cross-Site Scripting (0.3)

WebLogic CVE-2020-14859 Vulnerability (CVE-2020-14859)

WordPress Plugin Advanced Access Manager Arbitrary Code Execution (2.8.2)

Python Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-2089)

WordPress Plugin WooCommerce Unspecified Vulnerability (3.9.1)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-532 CVE-2018-10889