CVE-2024-43429

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

History

01 May 2025, 16:07

Type Values Removed Values Added
References () https://bugzilla.redhat.com/show_bug.cgi?id=2304257 - () https://bugzilla.redhat.com/show_bug.cgi?id=2304257 - Permissions Required
References () https://moodle.org/mod/forum/discuss.php?d=461197 - () https://moodle.org/mod/forum/discuss.php?d=461197 - Vendor Advisory
CPE cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
First Time Moodle
Moodle moodle

11 Nov 2024, 13:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-11 13:15

Updated : 2025-05-01 16:07


NVD link : CVE-2024-43429

Mitre link : CVE-2024-43429


JSON object : View

Products Affected

moodle

  • moodle
CWE

No CWE.