CVE-2026-102579

Katalog CVE

CVSS 4.3 · Medium EPSS 0,23%

Kerentanan Exposure of Private Personal Information to an Unauthorized Actor pada moodle. Skor CVSS 3.1 4.3 (Medium) menurut puiterwijk.org.

Deskripsi (NVD)

A flaw was found in Moodle. An incorrect capability check in the grade web service allows an authenticated student to access profile information of other students enrolled in the same course that they should not have permission to view. This issue leads to unauthorized information disclosure.

Rincian

Terbit di NVD

30 September 2026

Terakhir diubah

1 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber puiterwijk.org
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://moodle.org/mod/forum/discuss.php?d=482497 advisory vendor
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-89381 patch
• https://access.redhat.com/security/cve/CVE-2026-102579 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2543633 issue tracking · advisory pihak ketiga