CVE-2020-25703CWE-201

The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden

published November 19, 2020

CVSS
—
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5 and 3.7 to 3.7.8. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, and 3.10.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01538 · 74.7th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2020-11-19T16:13Z
EPSS history
Timeline
  • 19 NOV 16:13Z
    The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden
    cvelistv5