Description

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.

Remediation

References

CVE-2018-10889

Related Vulnerabilities

WordPress Plugin Greg's High Performance SEO Cross-Site Scripting (1.6.1)

phpMyFAQ Other Vulnerability (CVE-2005-3734)

Atlassian Jira Incorrect Authorization Vulnerability (CVE-2020-36287)

LimeSurvey CVE-2008-2570 Vulnerability (CVE-2008-2570)

ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2049)

Severity

Medium

Classification

CVE-2018-10889 CWE-532 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities