Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-7831
4
MEDIUMCVSS v2
Published
November 24, 2014
Affected
5 projects
Assigned by
Red Hat
Severity scale
010
Description
lib/classes/grades_external.php in Moodle 2.7.x before 2.7.3 does not consider the moodle/grade:viewhidden capability before displaying hidden grades, which allows remote authenticated users to obtain sensitive information by leveraging the student role to access the get_grades web service.
moodle/moodle
GitHubMoodle - the world's open source learning platform
GitHubMoodle - the world's open source learning platform= 2.7.1, = 2.5.1, = 2.5.3, = 2.5.7, = 2.7.2, = 2.5.5, = 2.6.1, = 2.5.2, <= 2.4.11, = 2.5.6, = 2.5.4, = 2.6.0, = 2.6.2, = 2.6.3, = 2.5.0, = 2.6.4, = 2.7.0, = 2.5.8, = 2.6.5, >= 2.7.0, < 2.7.3NVD
moodle
NPMModel module for node for use with both mongodb and mysql.
NPMModel module for node for use with both mongodb and mysql.= 2.7.1, = 2.5.1, = 2.5.3, = 2.5.7, = 2.7.2, = 2.5.5, = 2.6.1, = 2.5.2, <= 2.4.11, = 2.5.6, = 2.5.4, = 2.6.0, = 2.6.2, = 2.6.3, = 2.5.0, = 2.6.4, = 2.7.0, = 2.5.8, = 2.6.5NVD
RubyGems