Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-wp3g-pr4h-q6vv
Advisory ID github_osv/GHSA-wp3g-pr4h-q6vv
Aliases CVE-2013-2082
Summary Moodle does not enforce capability requirements for reading blog comments Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not enforce capability requirements for reading blog comments, which allows remote attackers to obtain sensitive information via a crafted request.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
generic_textual MODERATE
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37245
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html
http://openwall.com/lists/oss-security/2013/05/21/1
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/28772fb9e7e6be01b765fb721af16901bb47e417
https://github.com/moodle/moodle/commit/5fde58a59335bc3109a9eaac4a15d1e9217541c3
https://github.com/moodle/moodle/commit/8aa12adcf26ff2f0b61cd6f0288f2886c8c55bf7
https://github.com/moodle/moodle/commit/9a909b1a359f72b8d384e18da8e05474604279e1
https://github.com/moodle/moodle/commit/cb538f0e539e833edb7cf6fa3d705e8abc5003fd
https://github.com/moodle/moodle/commit/f9e27e8323f31186820d25252ec0d4c6cd65dafc
https://moodle.org/mod/forum/discuss.php?d=228934
CVE-2013-2082 https://nvd.nist.gov/vuln/detail/CVE-2013-2082
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.