Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gp4w-f57r-9rx3

Опубликовано: 30 сент. 2022
Источник: github
Github: Прошло ревью
CVSS3: 4.3

Описание

Moodle Exposure of Sensitive Information to an Unauthorized Actor

It was possible for a student to view their quiz grade before it had been released, using a quiz web service.

Пакеты

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 3.11, < 3.11.3

3.11.3

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 3.10, < 3.10.7

3.10.7

Наименование

moodle/moodle

composer
Затронутые версииВерсия исправления

>= 3.9, < 3.9.10

3.9.10

EPSS

Процентиль: 59%
0.00853
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 4 лет назад

It was possible for a student to view their quiz grade before it had been released, using a quiz web service.

CVSS3: 4.3
nvd
около 4 лет назад

It was possible for a student to view their quiz grade before it had been released, using a quiz web service.

CVSS3: 4.3
debian
около 4 лет назад

It was possible for a student to view their quiz grade before it had b ...

CVSS3: 6.5
altlinux
около 5 лет назад

ALT-PU-2021-2787: package `moodle` update to version 3.11.3-alt1

CVSS3: 9.8
altlinux
почти 5 лет назад

ALT-PU-2021-3335: package `moodle` update to version 3.11.4-alt1

EPSS

Процентиль: 59%
0.00853
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-200