Search for vulnerabilities
Vulnerability details: VCID-abrv-15hd-e7g2
Vulnerability ID VCID-abrv-15hd-e7g2
Aliases CVE-2015-5340
GHSA-mmvj-j7hq-rx85
Summary Moodle sensitive information disclosure Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not consider the moodle/badges:viewbadges capability, which allows remote authenticated users to obtain sensitive badge information via a request involving (1) `badges/overview.php` or (2) `badges/view.php`.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3.1 4.3 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51684
generic_textual MODERATE http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51684
epss 0.00293 https://api.first.org/data/v1/epss?cve=CVE-2015-5340
epss 0.00293 https://api.first.org/data/v1/epss?cve=CVE-2015-5340
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-mmvj-j7hq-rx85
cvssv3.1 4.3 https://github.com/moodle/moodle
generic_textual MODERATE https://github.com/moodle/moodle
cvssv3.1 4.3 https://github.com/moodle/moodle/commit/47d5c29202e299fdbe54229d3f6b0c381835eae3
generic_textual MODERATE https://github.com/moodle/moodle/commit/47d5c29202e299fdbe54229d3f6b0c381835eae3
cvssv3.1 4.3 https://github.com/moodle/moodle/commit/65734f149f3c7e6cce9402f51f9a97deb31170db
generic_textual MODERATE https://github.com/moodle/moodle/commit/65734f149f3c7e6cce9402f51f9a97deb31170db
cvssv3.1 4.3 https://github.com/moodle/moodle/commit/7cff64fdbfff749e779cb625fbddcce737355100
generic_textual MODERATE https://github.com/moodle/moodle/commit/7cff64fdbfff749e779cb625fbddcce737355100
cvssv3.1 4.3 https://github.com/moodle/moodle/commit/d41fa94a69bebeca69a4cd5332bb9569cfd87b99
generic_textual MODERATE https://github.com/moodle/moodle/commit/d41fa94a69bebeca69a4cd5332bb9569cfd87b99
cvssv3.1 4.3 https://github.com/moodle/moodle/commit/d70f610615242c5c7b3ae0bf7ef6868520dcd850
generic_textual MODERATE https://github.com/moodle/moodle/commit/d70f610615242c5c7b3ae0bf7ef6868520dcd850
cvssv3.1 4.3 https://moodle.org/mod/forum/discuss.php?d=323235
generic_textual MODERATE https://moodle.org/mod/forum/discuss.php?d=323235
cvssv3.1 4.3 https://nvd.nist.gov/vuln/detail/CVE-2015-5340
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2015-5340
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51684
https://api.first.org/data/v1/epss?cve=CVE-2015-5340
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/47d5c29202e299fdbe54229d3f6b0c381835eae3
https://github.com/moodle/moodle/commit/65734f149f3c7e6cce9402f51f9a97deb31170db
https://github.com/moodle/moodle/commit/7cff64fdbfff749e779cb625fbddcce737355100
https://github.com/moodle/moodle/commit/d41fa94a69bebeca69a4cd5332bb9569cfd87b99
https://github.com/moodle/moodle/commit/d70f610615242c5c7b3ae0bf7ef6868520dcd850
https://moodle.org/mod/forum/discuss.php?d=323235
https://nvd.nist.gov/vuln/detail/CVE-2015-5340
GHSA-mmvj-j7hq-rx85 https://github.com/advisories/GHSA-mmvj-j7hq-rx85
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51684
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/moodle/moodle
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/moodle/moodle/commit/47d5c29202e299fdbe54229d3f6b0c381835eae3
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/moodle/moodle/commit/65734f149f3c7e6cce9402f51f9a97deb31170db
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/moodle/moodle/commit/7cff64fdbfff749e779cb625fbddcce737355100
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/moodle/moodle/commit/d41fa94a69bebeca69a4cd5332bb9569cfd87b99
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/moodle/moodle/commit/d70f610615242c5c7b3ae0bf7ef6868520dcd850
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://moodle.org/mod/forum/discuss.php?d=323235
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2015-5340
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.52267
EPSS Score 0.00293
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:25:46.750575+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-mmvj-j7hq-rx85/GHSA-mmvj-j7hq-rx85.json 36.1.3