Description

lib/navigationlib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to obtain sensitive course-structure information by leveraging access to a student account with a suspended enrolment.

Remediation

References

CVE-2015-3180

Related Vulnerabilities

Oracle Application Server Other Vulnerability (CVE-2002-1636)

OpenSSL NULL Pointer Dereference Vulnerability (CVE-2017-3730)

WordPress Plugin Titan Anti-spam & Security Cross-Site Scripting (4.1)

WordPress Plugin Request a Quote Cross-Site Scripting (2.3.4)

WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Cross-Site Request Forgery (4.10.1)

Severity

Medium

Classification

CVE-2015-3180 CWE-200

Tags

Missing Update Known Vulnerabilities