CVE-2021-20281

—

CVSS 3.1

5.3 medium

EPSS

1%p69

Published

Mar 15, 2021 (Mar 15, 2021)

Modified

Jun 17, 2026

Description

It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.

Vendors: moodle fedoraproject
Products: moodle, fedora
Weakness: CWE-200, CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.