CVE-2011-4308

N/A Unknown

Published: July 11, 2012 Modified: April 29, 2026

Description

mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://git.moodle.org/gw?p=moodle.git&a=search&s=MDL-28615

Source: secalert@redhat.com

http://moodle.org/mod/forum/discuss.php?d=188322

Source: secalert@redhat.com

Vendor Advisory

http://www.debian.org/security/2012/dsa-2421

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=747444

Source: secalert@redhat.com

http://git.moodle.org/gw?p=moodle.git&a=search&s=MDL-28615

Source: af854a3a-2127-422b-91ae-364da2661108

http://moodle.org/mod/forum/discuss.php?d=188322

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.debian.org/security/2012/dsa-2421

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=747444

Source: af854a3a-2127-422b-91ae-364da2661108

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

1.7%

74th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-264

Affected Vendors

moodle

Related CVEs