NIXPKGS-2026-0040
published on 18 Jan 2026
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse removed package moodle-dl
-
@LeSuisse
removed
2 maintainers
- @kmein
- @freezeboy
- @LeSuisse accepted
- @LeSuisse published on GitHub
Moodle: router produces json instead of 404 error for invalid course id
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
Affected products
moodle
- <5.0.3
Package maintainers
Ignored maintainers (1)
-
@freezeboy freezeboy