Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-fc5p-vj3h-x7g4
Advisory ID github_osv/GHSA-fc5p-vj3h-x7g4
Aliases CVE-2014-0124
Summary Moodle allows attackers to obtain sensitive information The identity-reporting implementations in mod/forum/renderer.php and mod/quiz/override_form.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 do not properly restrict the display of e-mail addresses, which allows remote authenticated users to obtain sensitive information by using the (1) Forum or (2) Quiz module.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43916
http://openwall.com/lists/oss-security/2014/03/17/1
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/2978623cda4521773fe2d45e04bee76601de487f
https://github.com/moodle/moodle/commit/ae0ec61180ec71cb5b158633b0a3523a7ca41a82
https://github.com/moodle/moodle/commit/db4e2c4cd47d48ebf06424d942bf603a8fa94d97
https://github.com/moodle/moodle/commit/dc8f55c30211efd6fac80386e5b3bffef31cca13
https://moodle.org/mod/forum/discuss.php?d=256421
CVE-2014-0124 https://nvd.nist.gov/vuln/detail/CVE-2014-0124
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.