Description

The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability (site administrators by default). Moodle versions 3.10 to 3.10.3 are affected.

Related CPE's

a

moodle

moodle

Vulnerable

References

https://moodle.org/mod/forum/discuss.php?d=422313

PatchVendor Advisory

Weaknesses

[email protected]

Primary
CWE-862

[email protected]

Secondary
CWE-200

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.3 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-03-11T18:15:18.497

3 years ago

Last modified

2022-07-02T20:33:07.100

3 years ago