GitHub Advisoryadvisory · Packagist
GHSA-w2pj-r8m3-r4jc Moodle Information Disclosure
MEDIUM
Official page ↗
- Aliases
- CVE-2017-7531
- Ecosystem
- Packagist
- Packages
- moodle/moodle
- Severity
- Moderate
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-200
- Reviewed
- 2023-07-25
Affected packages
• Packagist moodle/moodle: < 3.3.1 → fixed in 3.3.1
Description
In Moodle 3.3, the course overview block reveals activities in hidden courses.
Related
Alias · CVE (1)
- CVE-2017-7531 In Moodle 3.3, the course overview block reveals activities in hidden courses. vulnerability
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-7531 advisory
- https://github.com/moodle/moodle/commit/2fe7f706d7567babd6c7aeb6612f231d2ce2fb2f web
- https://github.com/moodle/moodle package
- https://moodle.org/mod/forum/discuss.php?d=355555 web
- https://web.archive.org/web/20210124081202/http://www.securityfocus.com/bid/99618 web