← Back

CVE-2024-43429

nvd nist
Published: Nov 11, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

Affected (4)

Products: Moodle: Moodle
Moodle
1 product
Moodle
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Moodle
Moodle
Before 4.1.12
Moodle
From 4.2.0 to 4.2.9
Moodle
From 4.3.0 to 4.3.6
Moodle
From 4.4.0 to 4.4.2

Related CWEs

CWE-312
Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

Source: patrick@puiterwijk.org
Permissions Required
Source: patrick@puiterwijk.org
Vendor Advisory

Timeline

No history available yet.