Description

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.

Remediation

References

CVE-2018-10889

Related Vulnerabilities

Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-53952)

Squid NULL Pointer Dereference Vulnerability (CVE-2018-1000027)

Dolphin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-3167)

WordPress Plugin AutomatorWP-The most flexible and powerful no-code automation for WordPress Cross-Site Request Forgery (2.5.0)

NodeBB Arbitrary JSON File Read (CVE-2021-43788)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-532 CVE-2018-10889