Description

Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page breadcrumbs.

Remediation

References

CVE-2012-1169

Related Vulnerabilities

WordPress Plugin Google Map Remote Code Execution (1.0)

WordPress Plugin Livemesh Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (6.7.1)

WordPress Plugin Social Count Plus Cross-Site Scripting (3.0.2)

WordPress Plugin Display Users SQL Injection (2.0.0)

jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-31160)

Severity

Medium

Classification

CVE-2012-1169 CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities