CVE-2012-1161: Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results

Security readout for executives and security teams

CVE-2012-1161 is an information disclosure issue in older Moodle releases where hidden courses could appear in tag search results. The business impact is exposure of course names or metadata that administrators intended to keep private, not system takeover. The source bundle does not provide CVSS scoring or evidence of active exploitation. Exposure is most likely where legacy Moodle 2.1 or 2.2 deployments remain reachable, especially public or student-accessible sites using hidden courses and tag search. Modern upgraded Moodle instances are unlikely to be affected based on the affected ranges provided. Prioritize remediation if any affected Moodle instance is still internet-facing or used for sensitive training, unreleased curriculum, or restricted programs. For most organizations, this is a low-severity legacy hygiene issue, but it can still expose information that was intentionally hidden. Mitigation focus: Inventory Moodle instances and identify any 2.1 or 2.2 deployments.; Upgrade beyond the affected Moodle versions using vendor or distribution guidance.; Apply relevant Fedora, Debian, or Red Hat package updates where Moodle is distro-managed..

Prepared

Jun 6, 2026, 04:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.