Information Disclosure in Moodle Affects Users Enrolled in Shared Courses

CVE-2020-1692

What is CVE-2020-1692?

Moodle, a popular open-source learning platform, suffers from a vulnerability wherein users enrolled in the same course could have their service tokens exposed. This information disclosure flaw could allow an attacker to access sensitive user information or impersonate users, potentially leading to unauthorized actions within the platform. It is crucial for administrators to update to version 3.7.2 or later to mitigate this issue and enhance the security of sensitive user data.

References