CVE-2017-15110

In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 46%
VendorProductVersion
moodlemoodle
𝑥
≤ 3.0.10
moodlemoodle
3.1 ≤
𝑥
≤ 3.1.8
moodlemoodle
3.2 ≤
𝑥
≤ 3.2.5
moodlemoodle
3.3 ≤
𝑥
≤ 3.3.2
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
moodle
artful
not-affected
zesty
not-affected
xenial
not-affected
trusty
dne