CVE-2017-15110: Infoleak
First published: Mon Nov 20 2017(Updated: )
In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moodle Moodle | <=3.0.10 | |
| Moodle Moodle | >=3.1<=3.1.8 | |
| Moodle Moodle | >=3.2<=3.2.5 | |
| Moodle Moodle | >=3.3<=3.3.2 | |
| composer/moodle/moodle | >=3.3<3.3.3 | 3.3.3 |
| composer/moodle/moodle | >=3.2<3.2.6 | 3.2.6 |
| composer/moodle/moodle | >=3.1<3.1.9 | 3.1.9 |
| <=3.0.10 | ||
| >=3.1<=3.1.8 | ||
| >=3.2<=3.2.5 | ||
| >=3.3<=3.3.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/type
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-rjh8-w8jg-xwq5
- alias/CVE-2017-15110
- agent/software-canonical-lookup
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/author
- agent/softwarecombine
- collector/nvd-cve
- source/NVD
- collector/github-advisory
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- agent/trending
- vendor/moodle
- canonical/moodle moodle
- version/moodle moodle/3.0.10
- version/moodle moodle/3.1
- version/moodle moodle/3.1.8
- version/moodle moodle/3.2
- version/moodle moodle/3.2.5
- version/moodle moodle/3.3
- version/moodle moodle/3.3.2
- package-manager/composer