{
  "cveId": "CVE-2016-2158",
  "url": "https://patchblox.com/security/cve/CVE-2016-2158",
  "summary": "CVE-2016-2158 is fixed in moodle on 1 platform by moodle 3.0.3\u002Bdfsg-0ubuntu1 (version 3.0.3\u002Bdfsg-0ubuntu1), released May 22, 2016. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "moodle: lib/ajax/getnavbranch.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and...",
  "description": "lib/ajax/getnavbranch.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3, when the forcelogin feature is enabled, allows remote attackers to obtain sensitive category-detail information from the navigation branch by leveraging the guest role for an Ajax request.",
  "published": "2016-05-22T13:59:00Z",
  "severity": "Low",
  "epss": 0.01708,
  "epssPercentile": 0.7741,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "moodle",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "3.0.3\u002Bdfsg-0ubuntu1",
      "fix": "moodle 3.0.3\u002Bdfsg-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-moodle-3.0.3-dfsg-0ubuntu1",
      "released": "2016-05-22T13:59:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}