CVE-2012-1158: moodle moodle – CVSS 4.3 · Watchpost

← All vulnerabilities

CVE-2012-1158

MEDIUM 4.3CVE-2012-1158 · Published 14/11/2019 · updated 16/06/2026

In short

CVE-2012-1158 is a MEDIUM (CVSS 4.3) vulnerability affecting moodle (moodle).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.3% of all vulnerabilities.
Fix: update to 2.2.2 or later.

Package	Affected versions	Patched versions
moodle moodle	`< 2.2.2`	`2.2.2`

Description

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export

References

lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html · Third Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html · Third Party Advisory
access.redhat.com/security/cve/cve-2012-1158 · Broken Link
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
moodle.org/mod/forum/discuss.php · Patch
security-tracker.debian.org/tracker/CVE-2012-1158 · Third Party Advisory

More vulnerabilities in moodle

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free