Moodle DEPRECATED: Code Vulnerability - CVE-2015-3177 - Vulnerability Database

Moodle DEPRECATED: Code Vulnerability - CVE-2015-3177

Low

Reference: CVE-2015-3177

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-3177

Title: Moodle DEPRECATED: Code Vulnerability

Overview:

Moodle 2.8.x before 2.8.6 does not consider the tool/monitor:subscribe capability before entering subscriptions to site-wide event-monitor rules which allows remote authenticated users to obtain sensitive information via a subscription request.