{"action":"Upgrade moodle/moodle to 2.9.7 or later.","affected":[{"fixed":"3.1.1","introduced":"3.1.0"},{"fixed":"3.0.5","introduced":"3.0.0"},{"fixed":"2.9.7","introduced":"2.9.0"},{"introduced":"2.8.0","last_affected":"2.8.12"}],"component":"moodle/moodle","cve_ids":["CVE-2016-5014"],"ecosystem":"Packagist","epss":0.00977,"exploited":false,"fixed_versions":["3.1.1","3.0.5","2.9.7"],"ghsa_id":"GHSA-c4cq-v4wp-28hg","id":"tcs_01M5KF0JE8QDEHY55FS8SGRK48","modified_at":"2024-02-16T08:13:38.960452Z","published_at":"2022-05-13T01:12:40Z","references":["https://osv.dev/vulnerability/GHSA-c4cq-v4wp-28hg","https://nvd.nist.gov/vuln/detail/CVE-2016-5014","https://github.com/moodle/moodle/commit/ea106d2a1dbc633a22f12a119763b2af5f33542b","https://github.com/moodle/moodle","https://moodle.org/mod/forum/discuss.php?d=336699","https://web.archive.org/web/20210123154548/http://www.securityfocus.com/bid/92042"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-c4cq-v4wp-28hg","url":"https://osv.dev/vulnerability/GHSA-c4cq-v4wp-28hg"}],"summary":"Moodle sensitive information disclosure"}