CVE-2024-43427

Source
https://cve.org/CVERecord?id=CVE-2024-43427
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43427.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-43427
Aliases
Downstream
Published
2024-11-11T13:15:03.530Z
Modified
2026-03-12T08:28:13.452020Z
Severity
  • 3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.

References

Affected packages

Git / github.com/moodle/moodle

Affected ranges

Type
GIT
Repo
https://github.com/moodle/moodle
Events
Database specific
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.1.12"
        },
        {
            "introduced": "4.2.0"
        },
        {
            "fixed": "4.2.9"
        },
        {
            "introduced": "4.3.0"
        },
        {
            "fixed": "4.3.6"
        },
        {
            "introduced": "4.4.0"
        },
        {
            "fixed": "4.4.2"
        }
    ]
}

Affected versions

v4.*
v4.2.0
v4.2.1
v4.2.2
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.2.7
v4.2.8
v4.3.0
v4.3.0-beta
v4.3.0-rc1
v4.3.0-rc2
v4.3.1
v4.3.2
v4.3.3
v4.3.4
v4.3.5
v4.4.0
v4.4.0-beta
v4.4.0-rc1
v4.4.0-rc2
v4.4.1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43427.json"