Vulnerability in Moodle

CVE-2012-0793

Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to view the profile images of arbitrary user accounts via unspecified vectors.

EPSS: 0.021 (79.9th percentile) — read the EPSS interpretation.

Affected products

  • Moodle — versions 1.9.1, 1.9.2, 1.9.3
  • N/a — versions n/a

Weakness classification (CWE)

References