CVEvulnerability
CVE-2012-6102
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-01-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments (aka feedback comments) of arbitrary users via a crafted URI.
Affected configurations
• moodle moodle 2.3.0
• moodle moodle 2.3.1
• moodle moodle 2.3.2
• moodle moodle 2.3.3
• moodle moodle 2.4.0
Related
Weakness · not in database (1)
References
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37244 git.moodle.org
- http://openwall.com/lists/oss-security/2013/01/21/1 openwall.com
- https://moodle.org/mod/forum/discuss.php?d=220163 Vendor Advisory
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37244 git.moodle.org
- http://openwall.com/lists/oss-security/2013/01/21/1 openwall.com
- https://moodle.org/mod/forum/discuss.php?d=220163 Vendor Advisory