CVE-2017-15110

EUVD-2022-5189
In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 46%
Affected Products (NVD)
VendorProductVersion
moodlemoodle
𝑥
≤ 3.0.10
moodlemoodle
3.1 ≤
𝑥
≤ 3.1.8
moodlemoodle
3.2 ≤
𝑥
≤ 3.2.5
moodlemoodle
3.3 ≤
𝑥
≤ 3.3.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
moodle
artful
not-affected
trusty
dne
xenial
not-affected
zesty
not-affected