CVE-2024-43429

Moodle: user information visibility control issues in gradebook reports

CVSS 5.3 MEDIUMEPSS 0.3%CWE-312

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

moodle

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugzilla.redhat.com/show_bug.cgi?id=2304257 https://moodle.org/mod/forum/discuss.php?d=461197