VulnerabilityAnalyzed
CVE-2024-43429
A flaw was found in moodle.
MEDIUM 5.3EPSS 0.33%
Does this matter?
Lower severity and a low EPSS score (0.33%). Track it; it rarely justifies an emergency change on its own.
Description
A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.33% probability · 26th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-312
- Affected
- moodle/moodle
- Source
- patrick@puiterwijk.org
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2304257Permissions Required
- https://moodle.org/mod/forum/discuss.php?d=461197Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.