Skip to content
OpenAdvisories
Medium · 4.3 CVE-2017-7531 EUVD-2022-5466GHSA-w2pj-r8m3-r4jc

Moodle Information Disclosure

Published Jul 17, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

In Moodle 3.3, the course overview block reveals activities in hidden courses.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS moodle No fix yet —
Ubuntu Pro 16.04 LTS moodle No fix yet —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist moodle/moodle < 3.3.1 3.3.1 GHSA-w2pj-r8m3-r4jc

References