CVEvulnerability
CVE-2013-1829
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-03-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displaying calendar subscriptions, which allows remote authenticated users to obtain potentially sensitive information by leveraging the student role.
Affected configurations
• moodle moodle 2.4.0
• moodle moodle 2.4.1
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37338 Patch
- http://openwall.com/lists/oss-security/2013/03/25/2 openwall.com
- https://moodle.org/mod/forum/discuss.php?d=225339 Vendor Advisory
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37338 Patch
- http://openwall.com/lists/oss-security/2013/03/25/2 openwall.com
- https://moodle.org/mod/forum/discuss.php?d=225339 Vendor Advisory