CVE-2017-15110

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-20 · updated 2026-06-17
Weakness: CWE-200

Description

In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.

Affected products

Moodle: through 3.0.10; from 3.1 through 3.1.8; from 3.2 through 3.2.5; from 3.3 through 3.3.2

References

http://www.securityfocus.com/bid/101909
https://moodle.org/mod/forum/discuss.php?d=361784
http://www.securityfocus.com/bid/101909
https://moodle.org/mod/forum/discuss.php?d=361784

Get alerted when CVE-2017-15110 or the next vulnerability affects your stack