Moodle User Identifier Exposure Vulnerability During Anonymous Assignment Submissions

A data exposure vulnerability has been identified in Moodle, where user identifiers were unintentionally revealed in URLs during anonymous assignment submissions. This exposure allows unauthorized individuals to access internal user IDs, undermining the intended anonymity and potentially leading to unauthorized information disclosure.

Impact

The vulnerability could result in the unauthorized disclosure of internal user IDs, compromising user anonymity and potentially allowing for further information leakage.