Description
Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to view the profile images of arbitrary user accounts via unspecified vectors.
Remediation
References
Related Vulnerabilities
MySQL CVE-2019-2938 Vulnerability (CVE-2019-2938)
Craft CMS Missing Encryption of Sensitive Data Vulnerability (CVE-2018-20465)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1834)
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-26034)
WordPress Plugin Instant Images-One Click Unsplash Uploads Cross-Site Scripting (4.4.0)