Description

The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover the name of any user via a beep operation.

Remediation

References

CVE-2011-4304

Related Vulnerabilities

Ruby Other Vulnerability (CVE-2014-8080)

MySQL CVE-2023-22112 Vulnerability (CVE-2023-22112)

ownCloud CVE-2022-43679 Vulnerability (CVE-2022-43679)

PHP Other Vulnerability (CVE-2007-1649)

WordPress Plugin NextGEN Gallery-WordPress Gallery Local File Inclusion (2.1.7)

Severity

Medium

Classification

CVE-2011-4304 CWE-200

Tags

Missing Update Known Vulnerabilities