CVE-2011-4308: Moodle

Medium severity, CVSS 4.0. EPSS: 1.7% chance of exploitation in the next 30 days.

mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors.

Affected products

• Moodle Moodle: version 1.9.1 only; version 1.9.2 only; version 1.9.3 only; version 1.9.4 only; version 1.9.5 only; version 1.9.6 only; …

Published 2012-07-11. Last modified 2026-06-16.