GHSA-3qg4-2fcm-c8f9Medium

Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members

Published
May 13, 2022
Last Modified
April 12, 2025

🔗 CVE IDs covered (1)

CVE-2011-4289 →

📋 Description

Moodle 2.0.x before 2.0.3 does not recognize the configuration setting that makes e-mail addresses visible only to course members, which allows remote authenticated users to obtain sensitive address information by reading a full profile page.

🎯 Affected products1

  • composer/moodle/moodle:>= 2.0.0, < 2.0.3

🔗 References (6)