CVE-2021-20281: Information Exposure

March 15, 2021 (updated November 7, 2023)

It was possible for some users without permission to view other users’ full names to do so via the online users block in moodle

References

bugzilla.redhat.com/show_bug.cgi?id=1939041
moodle.org/mod/forum/discuss.php?d=419652
nvd.nist.gov/vuln/detail/CVE-2021-20281

Detect and mitigate CVE-2021-20281 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →