Medium
Moodle: user information visibility control issues in gradebook reports
Type: advisorySources: OSV
A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2024-43429
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 12:39 UTC · Revision 1
Source evidence
Moodle: user information visibility control issues in gradebook reports
core-osv · Original sourcePublished 11 Nov 2024, 12:15 UTC
A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.
osv:CVE-2024-43429
Complete source record
{
"id": "ac8bafe9b80ba0504273a4dcd9587f0d50152332e70b0e8df15fc557a1eb50ae",
"url": "https://osv.dev/vulnerability/CVE-2024-43429",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Moodle: user information visibility control issues in gradebook reports",
"summary": "A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the \"view hidden user fields\" capability having access to the information.",
"evidence": "osv:CVE-2024-43429",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2024-43429",
"aliases": [
"BIT-moodle-2024-43429",
"CVE-2024-43429",
"GHSA-c767-4whh-v7rw"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/moodle/moodle",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "aea9770cfc7d003a737f4899489d1e3982efe9ac"
},
{
"introduced": "ae4efa96ee8169a848c141ad21690165ea791552"
},
{
"fixed": "62c1f37d409241624a6b69119c754dcc3664b0ce"
},
{
"introduced": "fe7aff8093240cc373f1ddaa66ecb91c4bc0a09f"
},
{
"fixed": "fcf23db6be03ebe13077f881f0b4cf8757984452"
},
{
"introduced": "ee91c6536f99e1633e2245780c4fe7f47340ed66"
},
{
"fixed": "cc2edf3b8ccaa116e19ea2bb5daec7ed8adb3acd"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "4.1.12"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.2.0"
},
{
"fixed": "4.2.9"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.3.0"
},
{
"fixed": "4.3.6"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.4.0"
},
{
"fixed": "4.4.2"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v4.3.5",
"v4.4.1",
"v4.1.11",
"v4.2.8",
"v4.1.10",
"v4.3.4",
"v4.2.7",
"v4.4.0",
"v4.2.6",
"v4.3.3",
"v4.1.9",
"v4.1.8",
"v4.2.5",
"v4.3.2",
"v4.2.4",
"v4.1.7",
"v4.3.1",
"v4.3.0",
"v4.2.3",
"v4.1.6",
"v4.1.5",
"v4.2.2",
"v4.2.1",
"v4.1.4",
"v4.2.0",
"v4.1.3",
"v4.1.2",
"v4.1.1",
"v4.1.0-beta",
"v4.1.0",
"v4.1.0-rc3",
"v4.1.0-rc2",
"v4.1.0-rc1",
"v4.0.0",
"v4.0.0-rc2",
"v4.0.0-rc3",
"v4.0.0-rc4",
"v4.0.0-rc1",
"v4.0.0-beta",
"v3.9.0-rc2",
"v3.9.0",
"v3.9.0-rc3",
"v3.9.0-rc1",
"v3.9.0-beta",
"v3.8.0",
"v3.8.0-rc1",
"v3.8.0-beta",
"v3.7.0",
"v3.7.0-rc2",
"v3.7.0-rc1",
"v3.7.0-beta",
"v3.6.0",
"v3.6.0-rc2",
"v3.6.0-rc3",
"v3.6.0-rc1",
"v3.6.0-beta",
"v3.5.0",
"v3.5.0-rc1",
"v3.5.0-beta",
"v3.4.0",
"v3.4.0-rc2",
"v3.4.0-rc3",
"v3.4.0-rc1",
"v3.4.0-beta",
"v3.3.0",
"v3.3.0-rc3",
"v3.3.0-rc2",
"v3.3.0-rc1",
"v3.3.0-beta",
"v3.2.0-rc2",
"v3.2.0",
"v3.2.0-rc4",
"v3.2.0-beta",
"v3.2.0-rc5",
"v3.2.0-rc3",
"v3.2.0-rc1",
"v3.1.0-beta",
"v3.1.0",
"v3.1.0-rc2",
"v3.1.0-rc1",
"v3.0.0-rc3",
"v3.0.0",
"v3.0.0-rc4",
"v3.0.0-rc2",
"v3.0.0-rc1",
"v3.0.0-beta",
"v2.9.0",
"v2.9.0-rc2",
"v2.9.0-rc1",
"v2.9.0-beta",
"v2.8.0",
"v2.8.0-rc2",
"v2.8.0-rc1",
"v2.8.0-beta",
"v2.7.0",
"v2.7.0-rc2",
"v2.7.0-rc1",
"v2.7.0-beta",
"v2.6.0",
"v2.6.0-rc1",
"v2.6.0-beta",
"v2.5.0",
"v2.5.0-rc1",
"v2.5.0-beta",
"v2.4.0-beta",
"v2.4.0-rc1",
"v2.4.0",
"v2.3.0",
"v2.3.0-rc1",
"v2.3.0-beta",
"v2.2.0",
"v2.2.0-rc1",
"v2.2.0-beta",
"v2.1.0",
"v2.0.1",
"v2.0.0",
"v2.0.0-rc2",
"v2.0.0-rc1",
"v1.3.0",
"v1.2.1",
"v1.2.0",
"v1.1.1",
"v1.1.0",
"v1.0.9",
"v1.0.8",
"v1.0.7",
"v1.0.6",
"v1.0.5",
"v1.0.4",
"v1.0.3",
"v1.0.2",
"v1.0.1",
"v1.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-43429.json"
}
}
],
"modified": "2026-10-28T02:30:28.757169670Z",
"provider": "osv",
"references": [
"https://moodle.org/mod/forum/discuss.php?d=461197",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43429.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-43429",
"https://bugzilla.redhat.com/show_bug.cgi?id=2304257",
"https://github.com/moodle/moodle"
],
"provider_metadata": {
"cna_assigner": "fedora",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43429.json"
}
},
"related_cves": [
{
"value": "CVE-2024-43429",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 495472,
"published_at": "2024-11-11T12:15:00.784+00:00"
}