What is GHSA-q53j-c866-h9mw?

GHSA-q53j-c866-h9mw is a security advisory published by GitHub Security Advisories with Low severity. Moodle doesn't properly check role

Which CVE IDs does GHSA-q53j-c866-h9mw cover?

GHSA-q53j-c866-h9mw covers the following CVE IDs: CVE-2010-1617. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-q53j-c866-h9mw?

GHSA-q53j-c866-h9mw affects 2 products, including: composer/moodle/moodle:\u003e= 1.8.0, \u003c 1.8.12; composer/moodle/moodle:\u003e= 1.9.0, \u003c 1.9.8.

GHSA-q53j-c866-h9mwLow

Moodle doesn't properly check role

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

April 12, 2025

🔗 CVE IDs covered (1)

CVE-2010-1617 →

📋 Description

user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page.

🎯 Affected products2

composer/moodle/moodle:>= 1.8.0, < 1.8.12
composer/moodle/moodle:>= 1.9.0, < 1.9.8

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2010-1617
http://cvs.moodle.org/moodle/user/view.php?r1=1.168.2.28&r2=1.168.2.29
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
http://moodle.org/security
https://github.com/advisories/GHSA-q53j-c866-h9mw