Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-43427

Date: November 11, 2024

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.

Language: PHP

Severity Score

Related Resources (6)

https://bugzilla.redhat.com/show_bug.cgi?id=2304255
https://nvd.nist.gov/vuln/detail/CVE-2024-43427
https://github.com/moodle/moodle
https://moodle.org/mod/forum/discuss.php?d=461195
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-79373
https://www.mend.io/vulnerability-database/CVE-2024-43427

Severity Score

Weakness Type (CWE)

Exposure of Sensitive Information to an Unauthorized Actor

CWE-200

Insecure Storage of Sensitive Information

CWE-922

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us