VULNERABILITY INTELLIGENCE

CVE-2017-15110

CVSS score4.3 MEDIUM

EPSS probability1.16%

CISA KEVNot currently listed

Published2017-11-20

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

secalert@redhat.com — Third Party Advisory, VDB Entry
secalert@redhat.com — Issue Tracking, Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Mitigation, Vendor Advisory