CVE-2018-10890CWE-200

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13

Medium · published July 10, 2018

CVSS v3.0
4.3
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02052 · 81.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2018-07-10T18:00Z
EPSS history
Timeline
  • 10 JUL 18:00Z
    A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13
    cvelistv5