-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from missing access checks for email visibility in two modules. The provided commit diff explicitly modifies these functions to add a $canviewemail check using get_extra_user_fields(), which validates permissions. Before the patch, both functions directly included email addresses in their output without this authorization step. The files and functions match the vulnerability description and patch context, confirming their role in the exposure.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| moodle/moodle | composer | < 2.4.9 | 2.4.9 |
| moodle/moodle | composer | >= 2.5.0, < 2.5.5 | 2.5.5 |
| moodle/moodle | composer | >= 2.6.0, < 2.6.2 | 2.6.2 |
A Semantic Attack on Google Gemini - Read the Latest Research