Skip to content
OpenAdvisories
Medium · 4.3 CVE-2012-1159 EUVD-2022-1796GHSA-p9hr-f4xj-8w8r

Moodle included private user files in course backups

Published Nov 14, 2019 · Updated Aug 6, 2024 · Assigned by redhat

Description

Moodle before 2.2.2: Overview report allows users to see hidden courses

Affected products

VendorProductAffectedFixed
Moodle Moodle 2.2 to 2.2.1+, 2.1 to 2.1.4+ —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist moodle/moodle >= 2.2, < 2.2.2 2.2.2 GHSA-p9hr-f4xj-8w8r
Packagist moodle/moodle >= 2.1, < 2.1.5 2.1.5 GHSA-p9hr-f4xj-8w8r
Packagist moodle/moodle >= 2.0, < 2.0.8 2.0.8 GHSA-p9hr-f4xj-8w8r
Packagist moodle/moodle < 1.9.17 1.9.17 GHSA-p9hr-f4xj-8w8r

References