Log in Start free

Vulnerability · Published May 18, 2022 · Assigned by fedora

CVE-2022-30598

Medium 4.3

In plain English

A medium-severity information exposure in moodle. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)4.3Medium
Exploit odds (30 days)1.1%top 33.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A flaw was found in moodle where global search results could include author information on some activities where a user may not otherwise have access to it.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Packagistmoodle/moodle4.0.1GHSA-fj6p-g234-rrv3
Packagistmoodle/moodle3.11.7GHSA-fj6p-g234-rrv3
Packagistmoodle/moodle3.10.11GHSA-fj6p-g234-rrv3
Packagistmoodle/moodle3.9.14GHSA-fj6p-g234-rrv3

Affected products (as reported)

VendorProductVersions
n/a moodle Affects : 4.0, 3.11 to 3.11.6, 3.10 to 3.10.10, 3.9 to 3.9.13 and earlier unsupported versions

Weakness: CWE-200

References