Moodle allowed some users without permission to view other users' full names
Moderate severity
GitHub Reviewed
Published
Mar 29, 2021
to the GitHub Advisory Database
•
Updated Sep 13, 2023
Package
Affected versions
>= 3.10.0, < 3.10.2
>= 3.9.0, < 3.9.5
>= 3.8.0, < 3.8.8
>= 3.5, < 3.5.17
Patched versions
3.10.2
3.9.5
3.8.8
3.5.17
Description
Published by the National Vulnerability Database
Mar 15, 2021
Reviewed
Mar 24, 2021
Published to the GitHub Advisory Database
Mar 29, 2021
Last updated
Sep 13, 2023
It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
References