CVE-2012-2353 | BDVDB-2026-51115 Detail

Description#

Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to "Enrolled users" under the Users Settings section.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://openwall.com/lists/oss-security/2012/05/23/2
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-31923

Exploit#

No public exploit known

History#

Version 12012-07-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.