~ / search / GHSA-fj6p-g234-rrv3

GHSA-fj6p-g234-rrv3

Exposure of Sensitive Information in moodle

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-30598

Packages

EcosystemPackageAffectedFixed in
Packagist moodle/moodle >= 4.0, < 4.0.1 4.0.1
Packagist moodle/moodle >= 3.11, < 3.11.7 3.11.7
Packagist moodle/moodle >= 3.10, < 3.10.11 3.10.11
Packagist moodle/moodle >= 3.9, < 3.9.14 3.9.14

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in moodle where global search results could include author information on some activities where a user may not otherwise have access to it.

References

External links from the advisory. They lead to third-party sites.