VULNERABILITY INTELLIGENCE
CVE-2014-0217
CVSS score4.3 NONE
EPSS probability1.87%
CISA KEVNot currently listed
Published2014-05-27
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
enrol/index.php in Moodle 2.6.x before 2.6.3 does not check for the moodle/course:viewhiddencourses capability before listing hidden courses, which allows remote attackers to obtain sensitive name and summary information about these courses by leveraging the guest role and visiting a crafted URL.
Weakness classification
- nvd@nist.gov: CWE-200