Medium CVE-2011-4284 EUVD-2011-4224GHSA-mw6p-49jf-9935

Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page

Published Jul 16, 2012 · Updated Aug 7, 2024 · Assigned by redhat

Package: moodle/moodle Ecosystem: Packagist

Description

Moodle 2.0.x before 2.0.2 allows remote attackers to obtain sensitive information from a myprofile (aka My profile) block by visiting a user-context page.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	moodle/moodle	>= 2.0.0, < 2.0.2	2.0.2	GHSA-mw6p-49jf-9935

References

[oss-security] 20111113 Re: Fwd: DSA 2338-1 moodle security update mailing-list
http://moodle.org/mod/forum/discuss.php?d=170010
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=0ab727fb35e5ae1d8316d96c6752ee9ebec4c185