Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2019-3810 - Vulnerability Database
Moodle

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2019-3810

Medium
Reference: CVE-2019-3810
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-3810
Title: Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

A flaw was found in moodle versions 3.6 to 3.6.1 3.5 to 3.5.3 3.4 to 3.4.6 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users39 full names which are included as text when hovering over profile images. Note this page is not linked to by default and its access is restricted.