CVE-2021-20281CWE-200

It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8…

published March 15, 2021

CVSS
—
EPSS
1%
Percentile
71.5
In the wild
Unconfirmed
What it is

It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01361 · 71.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2021-03-15T21:35Z
EPSS history
Timeline
  • 15 MAR 21:35Z
    It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8…
    cvelistv5