{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/43640?format=json","vulnerability_id":"VCID-6v43-drd7-ufd7","summary":"Moodle allows bypass of intended access restrictions\nmod/chat/chat_ajax.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly check for the mod/chat:chat capability during chat sessions, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by remaining in a chat session after an intra-session capability removal by an administrator.","aliases":[{"alias":"CVE-2014-0122"},{"alias":"GHSA-f9m9-494r-w36p"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/62043?format=json","purl":"pkg:composer/moodle/moodle@2.4.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2s6b-tp6p-gue1"},{"vulnerability":"VCID-37pj-u3gh-n7fd"},{"vulnerability":"VCID-65y9-9ur2-pugc"},{"vulnerability":"VCID-83kb-4mk9-t7ge"},{"vulnerability":"VCID-a6pb-47tu-afcg"},{"vulnerability":"VCID-ajkr-fxa1-mkhk"},{"vulnerability":"VCID-an53-nu91-k3d7"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-eaqp-7abt-6kg9"},{"vulnerability":"VCID-eu27-a3px-87ed"},{"vulnerability":"VCID-fsex-f512-pudv"},{"vulnerability":"VCID-jcq6-btgz-fkf6"},{"vulnerability":"VCID-k1bh-ymgt-e7cd"},{"vulnerability":"VCID-k6pw-51st-b3d2"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-m3np-aebb-8qaa"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mkfz-e1ft-2bcw"},{"vulnerability":"VCID-nntc-dsz1-e3fp"},{"vulnerability":"VCID-qhv1-wgpm-7fh6"},{"vulnerability":"VCID-qpu2-8paz-7ydv"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-vb67-yux5-ayhf"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-w9ca-exua-g7ar"},{"vulnerability":"VCID-x7rg-rsb5-pya7"},{"vulnerability":"VCID-xmm4-zw49-3feh"},{"vulnerability":"VCID-y8up-cqtu-jkdw"},{"vulnerability":"VCID-yghg-775s-vber"},{"vulnerability":"VCID-zjrq-np3y-hua5"},{"vulnerability":"VCID-zwkk-zazw-6fgg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.9"},{"url":"http://public2.vulnerablecode.io/api/packages/62044?format=json","purl":"pkg:composer/moodle/moodle@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2s6b-tp6p-gue1"},{"vulnerability":"VCID-37pj-u3gh-n7fd"},{"vulnerability":"VCID-65y9-9ur2-pugc"},{"vulnerability":"VCID-83kb-4mk9-t7ge"},{"vulnerability":"VCID-a6pb-47tu-afcg"},{"vulnerability":"VCID-ajkr-fxa1-mkhk"},{"vulnerability":"VCID-an53-nu91-k3d7"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-eaqp-7abt-6kg9"},{"vulnerability":"VCID-eu27-a3px-87ed"},{"vulnerability":"VCID-fsex-f512-pudv"},{"vulnerability":"VCID-jcq6-btgz-fkf6"},{"vulnerability":"VCID-k1bh-ymgt-e7cd"},{"vulnerability":"VCID-k6pw-51st-b3d2"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-m3np-aebb-8qaa"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mkfz-e1ft-2bcw"},{"vulnerability":"VCID-nntc-dsz1-e3fp"},{"vulnerability":"VCID-qhv1-wgpm-7fh6"},{"vulnerability":"VCID-qpu2-8paz-7ydv"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-vb67-yux5-ayhf"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-w9ca-exua-g7ar"},{"vulnerability":"VCID-x7rg-rsb5-pya7"},{"vulnerability":"VCID-xmm4-zw49-3feh"},{"vulnerability":"VCID-y8up-cqtu-jkdw"},{"vulnerability":"VCID-yghg-775s-vber"},{"vulnerability":"VCID-zjrq-np3y-hua5"},{"vulnerability":"VCID-zwkk-zazw-6fgg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.5"},{"url":"http://public2.vulnerablecode.io/api/packages/62045?format=json","purl":"pkg:composer/moodle/moodle@2.6.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2s6b-tp6p-gue1"},{"vulnerability":"VCID-37pj-u3gh-n7fd"},{"vulnerability":"VCID-65y9-9ur2-pugc"},{"vulnerability":"VCID-83kb-4mk9-t7ge"},{"vulnerability":"VCID-a6pb-47tu-afcg"},{"vulnerability":"VCID-ajkr-fxa1-mkhk"},{"vulnerability":"VCID-an53-nu91-k3d7"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-eaqp-7abt-6kg9"},{"vulnerability":"VCID-eu27-a3px-87ed"},{"vulnerability":"VCID-fsex-f512-pudv"},{"vulnerability":"VCID-jcq6-btgz-fkf6"},{"vulnerability":"VCID-k1bh-ymgt-e7cd"},{"vulnerability":"VCID-k6pw-51st-b3d2"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-m3np-aebb-8qaa"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mkfz-e1ft-2bcw"},{"vulnerability":"VCID-nntc-dsz1-e3fp"},{"vulnerability":"VCID-qhv1-wgpm-7fh6"},{"vulnerability":"VCID-qpu2-8paz-7ydv"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-vb67-yux5-ayhf"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-w9ca-exua-g7ar"},{"vulnerability":"VCID-x7rg-rsb5-pya7"},{"vulnerability":"VCID-xmm4-zw49-3feh"},{"vulnerability":"VCID-y8up-cqtu-jkdw"},{"vulnerability":"VCID-yghg-775s-vber"},{"vulnerability":"VCID-zjrq-np3y-hua5"},{"vulnerability":"VCID-zwkk-zazw-6fgg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.2"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/62041?format=json","purl":"pkg:composer/moodle/moodle@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1ehh-qz6c-ykhp"},{"vulnerability":"VCID-1whm-dsv7-t7gm"},{"vulnerability":"VCID-2s6b-tp6p-gue1"},{"vulnerability":"VCID-37pj-u3gh-n7fd"},{"vulnerability":"VCID-4v57-bu85-syhr"},{"vulnerability":"VCID-4xqt-yugc-qufr"},{"vulnerability":"VCID-5ru2-1n1f-afa4"},{"vulnerability":"VCID-65y9-9ur2-pugc"},{"vulnerability":"VCID-6v43-drd7-ufd7"},{"vulnerability":"VCID-7g7m-bu5q-gbcx"},{"vulnerability":"VCID-83kb-4mk9-t7ge"},{"vulnerability":"VCID-88pw-zwqn-cqfd"},{"vulnerability":"VCID-a6pb-47tu-afcg"},{"vulnerability":"VCID-ajkr-fxa1-mkhk"},{"vulnerability":"VCID-an53-nu91-k3d7"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-cvqm-kjhx-q7ej"},{"vulnerability":"VCID-czph-uxwr-5uge"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-ea5s-xphb-6ub7"},{"vulnerability":"VCID-eaqp-7abt-6kg9"},{"vulnerability":"VCID-eu27-a3px-87ed"},{"vulnerability":"VCID-fsex-f512-pudv"},{"vulnerability":"VCID-gdz8-d8j3-nqdh"},{"vulnerability":"VCID-h8xn-n98n-qqdv"},{"vulnerability":"VCID-j3t3-svwb-p7bn"},{"vulnerability":"VCID-jcq6-btgz-fkf6"},{"vulnerability":"VCID-k1bh-ymgt-e7cd"},{"vulnerability":"VCID-k6pw-51st-b3d2"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-m3np-aebb-8qaa"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mkfz-e1ft-2bcw"},{"vulnerability":"VCID-nntc-dsz1-e3fp"},{"vulnerability":"VCID-q3wv-9hj6-vbgt"},{"vulnerability":"VCID-qhv1-wgpm-7fh6"},{"vulnerability":"VCID-qpu2-8paz-7ydv"},{"vulnerability":"VCID-qxyw-7hnt-hqd6"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-r88h-mteg-yka9"},{"vulnerability":"VCID-rdfn-52p2-afa7"},{"vulnerability":"VCID-s5cy-eva4-wbaf"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-ucg8-htfc-2bhn"},{"vulnerability":"VCID-vb67-yux5-ayhf"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-vrfy-36yc-muhr"},{"vulnerability":"VCID-vs2j-b4qg-nbgu"},{"vulnerability":"VCID-vwyj-z4gf-8fg5"},{"vulnerability":"VCID-w9ca-exua-g7ar"},{"vulnerability":"VCID-x7rg-rsb5-pya7"},{"vulnerability":"VCID-xmm4-zw49-3feh"},{"vulnerability":"VCID-y8up-cqtu-jkdw"},{"vulnerability":"VCID-yghg-775s-vber"},{"vulnerability":"VCID-zjrq-np3y-hua5"},{"vulnerability":"VCID-zwkk-zazw-6fgg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/62042?format=json","purl":"pkg:composer/moodle/moodle@2.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1ehh-qz6c-ykhp"},{"vulnerability":"VCID-1rar-m2g3-27ag"},{"vulnerability":"VCID-1whm-dsv7-t7gm"},{"vulnerability":"VCID-29yj-e9bd-queq"},{"vulnerability":"VCID-2s6b-tp6p-gue1"},{"vulnerability":"VCID-37pj-u3gh-n7fd"},{"vulnerability":"VCID-3xwm-hqap-8bct"},{"vulnerability":"VCID-4v57-bu85-syhr"},{"vulnerability":"VCID-4xqt-yugc-qufr"},{"vulnerability":"VCID-5c29-qn3p-3yde"},{"vulnerability":"VCID-5ru2-1n1f-afa4"},{"vulnerability":"VCID-65y9-9ur2-pugc"},{"vulnerability":"VCID-6v43-drd7-ufd7"},{"vulnerability":"VCID-7g7m-bu5q-gbcx"},{"vulnerability":"VCID-7x8g-tdd5-kqbs"},{"vulnerability":"VCID-83kb-4mk9-t7ge"},{"vulnerability":"VCID-88pw-zwqn-cqfd"},{"vulnerability":"VCID-8q4n-d565-kfbn"},{"vulnerability":"VCID-a6pb-47tu-afcg"},{"vulnerability":"VCID-ajkr-fxa1-mkhk"},{"vulnerability":"VCID-an53-nu91-k3d7"},{"vulnerability":"VCID-bfmx-cwap-8yhp"},{"vulnerability":"VCID-bjnq-q2nd-1khp"},{"vulnerability":"VCID-cvqm-kjhx-q7ej"},{"vulnerability":"VCID-czph-uxwr-5uge"},{"vulnerability":"VCID-duna-st9c-mqbk"},{"vulnerability":"VCID-ea5s-xphb-6ub7"},{"vulnerability":"VCID-eaqp-7abt-6kg9"},{"vulnerability":"VCID-eu27-a3px-87ed"},{"vulnerability":"VCID-fs9k-21es-rygd"},{"vulnerability":"VCID-fsex-f512-pudv"},{"vulnerability":"VCID-fumj-9pun-zfc5"},{"vulnerability":"VCID-gdz8-d8j3-nqdh"},{"vulnerability":"VCID-h8xn-n98n-qqdv"},{"vulnerability":"VCID-hbky-xx53-vkct"},{"vulnerability":"VCID-hck4-emsr-q7dc"},{"vulnerability":"VCID-j3t3-svwb-p7bn"},{"vulnerability":"VCID-jcq6-btgz-fkf6"},{"vulnerability":"VCID-k1bh-ymgt-e7cd"},{"vulnerability":"VCID-k6pw-51st-b3d2"},{"vulnerability":"VCID-k73h-z6j8-gkgz"},{"vulnerability":"VCID-krn6-pwk5-ake2"},{"vulnerability":"VCID-kzwd-2e6n-fkbm"},{"vulnerability":"VCID-m3np-aebb-8qaa"},{"vulnerability":"VCID-m4zv-e3dn-budf"},{"vulnerability":"VCID-mkfz-e1ft-2bcw"},{"vulnerability":"VCID-nntc-dsz1-e3fp"},{"vulnerability":"VCID-q3wv-9hj6-vbgt"},{"vulnerability":"VCID-qhv1-wgpm-7fh6"},{"vulnerability":"VCID-qpu2-8paz-7ydv"},{"vulnerability":"VCID-qxyw-7hnt-hqd6"},{"vulnerability":"VCID-r6kn-b963-eqge"},{"vulnerability":"VCID-r88h-mteg-yka9"},{"vulnerability":"VCID-rdfn-52p2-afa7"},{"vulnerability":"VCID-s5cy-eva4-wbaf"},{"vulnerability":"VCID-s6uu-335k-yfbc"},{"vulnerability":"VCID-ucg8-htfc-2bhn"},{"vulnerability":"VCID-uptz-tj66-7yfk"},{"vulnerability":"VCID-uvgt-7m5a-xkdc"},{"vulnerability":"VCID-v4qm-48kk-pfaz"},{"vulnerability":"VCID-v7zm-cw8w-6yf8"},{"vulnerability":"VCID-vb67-yux5-ayhf"},{"vulnerability":"VCID-vda3-4fgr-gfbw"},{"vulnerability":"VCID-vfp6-4h8n-bkax"},{"vulnerability":"VCID-vrfy-36yc-muhr"},{"vulnerability":"VCID-vs2j-b4qg-nbgu"},{"vulnerability":"VCID-vwyj-z4gf-8fg5"},{"vulnerability":"VCID-w9ca-exua-g7ar"},{"vulnerability":"VCID-x7rg-rsb5-pya7"},{"vulnerability":"VCID-xmm4-zw49-3feh"},{"vulnerability":"VCID-xnmk-jah2-ufce"},{"vulnerability":"VCID-y8up-cqtu-jkdw"},{"vulnerability":"VCID-yghg-775s-vber"},{"vulnerability":"VCID-zjrq-np3y-hua5"},{"vulnerability":"VCID-zwkk-zazw-6fgg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.6.0"}],"references":[{"reference_url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44082","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-44082"},{"reference_url":"http://openwall.com/lists/oss-security/2014/03/17/1","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://openwall.com/lists/oss-security/2014/03/17/1"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0122","reference_id":"","reference_type":"","scores":[{"value":"0.00171","scoring_system":"epss","scoring_elements":"0.38101","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-0122"},{"reference_url":"https://github.com/moodle/moodle","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/moodle/moodle"},{"reference_url":"https://github.com/moodle/moodle/commit/3d7810ab3d67a423a760ba89ae75de81d940b236","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/moodle/moodle/commit/3d7810ab3d67a423a760ba89ae75de81d940b236"},{"reference_url":"https://github.com/moodle/moodle/commit/4d4867503c2467cb04660d9cb314d22f56004054","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/moodle/moodle/commit/4d4867503c2467cb04660d9cb314d22f56004054"},{"reference_url":"https://github.com/moodle/moodle/commit/5c45ea0c6bf2fdf4dddfaef9fc5ff12e6b426a3f","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/moodle/moodle/commit/5c45ea0c6bf2fdf4dddfaef9fc5ff12e6b426a3f"},{"reference_url":"https://github.com/moodle/moodle/commit/7748e17207b1a28118d9dc622878da22f956d3fe","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/moodle/moodle/commit/7748e17207b1a28118d9dc622878da22f956d3fe"},{"reference_url":"https://moodle.org/mod/forum/discuss.php?d=256418","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://moodle.org/mod/forum/discuss.php?d=256418"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0122","reference_id":"CVE-2014-0122","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-0122"},{"reference_url":"https://github.com/advisories/GHSA-f9m9-494r-w36p","reference_id":"GHSA-f9m9-494r-w36p","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-f9m9-494r-w36p"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":264,"name":"Permissions, Privileges, and Access Controls","description":"Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"6.2","risk_score":3.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6v43-drd7-ufd7"}