CVE-2017-2642: Moodle

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Moodle 3.x has user fullname disclosure on the user preferences page.

Affected products

• Moodle Moodle: version 3.1.0 only; version 3.1.1 only; version 3.1.2 only; version 3.1.3 only; version 3.1.4 only; version 3.1.5 only; …

Published 2017-07-17. Last modified 2026-06-17.