BIT-moodle-2024-43427

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/moodle/BIT-moodle-2024-43427.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-moodle-2024-43427
Aliases
Published
2025-05-02T06:18:45.967Z
Modified
2025-05-20T10:02:07.006Z
Summary
Moodle: admin presets export tool includes some secrets that should not be exported
Details

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.

Database specific
{
    "cpes": [
        "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*"
    ],
    "severity": "Low"
}
References

Affected packages

Bitnami / moodle

Package

Name
moodle
Purl
pkg:bitnami/moodle

Severity

  • 3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.1.12
Introduced
4.2.0
Fixed
4.2.9
Introduced
4.3.0
Fixed
4.3.6
Introduced
4.4.0
Fixed
4.4.2