CVE-2024-43429

MEDIUM

Moodle < 4.1.12 - Cleartext Storage

Title source: rule
STIX 2.1

Description

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

References (2)

Scores

CVSS v3 5.3
EPSS 0.0030
EPSS Percentile 52.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-312
Status published
Products (2)
moodle/moodle < 4.1.12
moodle/moodle 4.4.0 - 4.4.2Packagist
Published Nov 11, 2024
Tracked Since Feb 18, 2026