Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2022-30598

A flaw was found in moodle where global search results could include author information on some activities where a user may not otherwise have access to it.

VectorNETWORK

PublishedMay 18, 2022, 18:15

Published Bypatrick@puiterwijk.org

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

moodle/moodle(Packagist)4.04.0.1N/A

moodle/moodle(Packagist)3.113.11.7N/A

moodle/moodle(Packagist)3.103.10.11N/A

moodle/moodle(Packagist)3.93.9.14N/A

References

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-71623
https://bugzilla.redhat.com/show_bug.cgi?id=2083592
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OGF35EN5K2R6X3NTY3XPZSJ3UDASMXI6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PIMSIRKCFLIC646K4GMUSZU7THOUVPAJ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCTWSE3JDMSYL7DPCMXMMJEXZSS6VIA5/
https://moodle.org/mod/forum/discuss.php?d=434580

Weakness Type

NVD-CWE-noinfo

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK