Beveiligingsadvies

CVE-2016-2158

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-05-22 20:00:00

Laatst bijgewerkt 2024-08-05 23:17:50

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

lib/ajax/getnavbranch.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3, when the forcelogin feature is enabled, allows remote attackers to obtain sensitive category-detail information from the navigation branch by leveraging the guest role for an Ajax request.

← Alle CVE's bekijken Bekijk op cve.org ↗