CVE-2026-102587

Description

A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile fields. An authorized user with manager privileges can filter user lists using profile attributes they are not permitted to view directly, resulting in unauthorized information disclosure by inferring hidden user data.

Traduire en français

Produits concernés

• Moodle moodle

Scores CVSS

Faiblesses (CWE)

• CWE-204

Références

• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-87518 Patch
• https://access.redhat.com/security/cve/CVE-2026-102587 Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2543642 Issue TrackingThird Party Advisory
• https://moodle.org/mod/forum/discuss.php?d=482506 Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories