The LAMS module (mod/lams) for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores the (1) username, (2) firstname, and (3) lastname fields within the user table, which allows attackers to obtain user account information via unknown vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-bsUpgrade moodle-ltUpgrade moodle-deUpgrade moodle-nlUpgrade moodle-huUpgrade moodle-nnUpgrade moodle-slUpgrade moodle-skUpgrade moodle-knUpgrade moodle-heUpgrade moodle-euUpgrade moodle-arUpgrade moodle-idUpgrade moodle-mi_tnUpgrade moodle-elUpgrade moodle-noUpgrade moodle-itUpgrade moodle-srUpgrade moodle-hiUpgrade moodle-ruUpgrade moodle-hrUpgrade moodle-faUpgrade moodle-svUpgrade moodle-roUpgrade moodle-viUpgrade moodle-glUpgrade moodle-isUpgrade moodle-de_duUpgrade moodle-ukUpgrade moodle-lvUpgrade moodle-beUpgrade moodle-kmUpgrade moodle-caUpgrade moodle-sqUpgrade moodle-msUpgrade moodle-etUpgrade moodle-zh_cnUpgrade moodle-tlUpgrade moodle-ptUpgrade moodle-gaUpgrade moodle-plUpgrade moodle-daUpgrade moodle-trUpgrade moodle-koUpgrade moodleUpgrade moodle-kaUpgrade moodle-afUpgrade moodle-esUpgrade moodle-thUpgrade moodle-bgUpgrade moodle-fiUpgrade moodle-soUpgrade moodle-jaUpgrade moodle-csUpgrade moodle-fr | Feb 17, 2015 | Dec 15, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub