Description

Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to "Enrolled users" under the Users Settings section.

Remediation

References

CVE-2012-2353

Related Vulnerabilities

WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Server-Side Request Forgery (3.4.3)

Python CVE-2023-6507 Vulnerability (CVE-2023-6507)

WordPress Plugin Ajax Contact Form Cross-Site Scripting (1.0)

WordPress Plugin WordPress Popular Posts Multiple Vulnerabilities (5.3.2)

WordPress Plugin WP Reroute Email Cross-Site Scripting (1.4.9)

Severity

Medium

Classification

CVE-2012-2353 CWE-200

Tags

Missing Update Known Vulnerabilities