CVE-2018-10889

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.

Score

CVSS 3.0 5.3 Medium

Status

Modified - secalert@redhat.com

Published

2018-07-10

Last modified

2024-08-05

Weaknesses

CWE-532

Affected products

• Moodle (Moodle)
• Moodle (Unknown)

References

• http://www.securityfocus.com/bid/104733
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10889
• https://moodle.org/mod/forum/discuss.php?d=373369