CVE-2023-28334

CVE-2023-28334: Moodle: users' name enumeration possible via idor on learning plans page

Weakness CWE-200 · Info exposure
Published March 23, 2023
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Authenticated users were able to enumerate other users' names via the learning plans page.

Key dates

02Disclosure timeline

March 23, 2023 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-34313 IBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies CVE-2022-44589 WordPress miniOrange's Google Authenticator Plugin <= 5.6.1 is vulnerable to Sensitive Data Exposure CVE-2025-32080 Cross-origin data leak in mobilefrontend via lazy load images CVE-2024-47922 Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CVE-2023-44187 Junos OS Evolved: 'file copy' CLI command can disclose password to shell users