VULNERABILITY INTELLIGENCE
CVE-2012-2353
CVSS score4 MEDIUM
EPSS probability1.38%
CISA KEVNot currently listed
Published2012-07-21
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:N/A:N
Description
Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information from hidden fields by leveraging the teacher role and navigating to "Enrolled users" under the Users Settings section.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor