FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

moodle -- multiple vulnerabilities

Affected packages
	moodle28	<	2.8.12
	moodle29	<	2.9.6
	moodle30	<	3.0.4

Details

VuXML ID	8656cf5f-4170-11e6-8dfe-002590263bf5
Discovery	2016-05-18
Entry	2016-07-03

Marina Glancy reports:

MSA-16-0013: Users are able to change profile fields that were locked by the administrator.

MSA-16-0015: Information disclosure of hidden forum names and sub-names.

MSA-16-0016: User can view badges of other users without proper permissions.

MSA-16-0017: Course idnumber not protected from teacher restore.

MSA-16-0018: CSRF in script marking forum posts as read.

[source]

References

CVE Name	CVE-2016-3729
CVE Name	CVE-2016-3731
CVE Name	CVE-2016-3732
CVE Name	CVE-2016-3733
CVE Name	CVE-2016-3734
URL	https://moodle.org/security/