PT-2017-17789 · Moodle · Moodle

Charles Fulton · Published 2017-07-17 · Updated 2022-05-13 · CVE-2017-7531

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moodle version 3.3

Description The course overview block in Moodle reveals activities in hidden courses, potentially exposing sensitive information.

Recommendations For Moodle version 3.3, consider hiding the course overview block to prevent the disclosure of activities in hidden courses until a fix is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-7531

GHSA-W2PJ-R8M3-R4JC

Affected Products

Moodle

References · 11

• https://ubuntu.com/security/CVE-2017-7531 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7531 · Security Note
• https://moodle.org/mod/forum/discuss.php?d=355555 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-7531 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-7531 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w2pj-r8m3-r4jc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-7531 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/2fe7f706d7567babd6c7aeb6612f231d2ce2fb2f · Note
• http://securityfocus.com/bid/99618 · Note
• https://web.archive.org/web/20210124081202/http://securityfocus.com/bid/99618 · Note