CVE-2011-4593 in Moodle
Summary
Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle user/action_redir group messages, which allows remote authenticated users to discover e-mail addresses by visiting the messaging interface.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
11/29/2011
Disclosure
07/20/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61356 | Moodle information disclosure | 200 | Not defined | Official fix | CVE-2011-4593 |