Описание
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
Ссылки
- Third Party Advisory
- Issue TrackingThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 5.0.0 (включая) до 5.0.3 (исключая)
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
EPSS
Процентиль: 12%
0.0004
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-209
Связанные уязвимости
CVSS3: 5.3
ubuntu
около 2 месяцев назад
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
CVSS3: 5.3
debian
около 2 месяцев назад
The router\u2019s inconsistent response to invalid course IDs allowed ...
CVSS3: 5.3
github
около 2 месяцев назад
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
EPSS
Процентиль: 12%
0.0004
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-209