CVE-2024-43429

Moodle: user information visibility control issues in gradebook reports

Medium · published November 11, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
25.2
In the wild
Unconfirmed
What it is

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00332 · 25.2th percentile
Published
2024-11-11T12:15Z
EPSS history
Timeline
  • 11 NOV 12:15Z
    Moodle: user information visibility control issues in gradebook reports
    cvelistv5