Search for vulnerabilities
Vulnerability details: VCID-sdqb-hs9t-tqeq
Vulnerability ID VCID-sdqb-hs9t-tqeq
Aliases CVE-2014-0123
GHSA-2vhr-4mhq-m35c
Summary Moodle does not properly restrict access The wiki subsystem in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly restrict (1) view and (2) edit access, which allows remote authenticated users to perform wiki operations by leveraging the student role and using the Recent Activity block to reach the individual wiki of an arbitrary student.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-264 Permissions, Privileges, and Access Controls
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
generic_textual MODERATE http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39990
generic_textual MODERATE http://openwall.com/lists/oss-security/2014/03/17/1
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2014-0123
epss 0.00193 https://api.first.org/data/v1/epss?cve=CVE-2014-0123
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-2vhr-4mhq-m35c
generic_textual MODERATE https://github.com/moodle/moodle
generic_textual MODERATE https://github.com/moodle/moodle/commit/3a7b9b76c2d3c58237bec56b3b537e05c23970ad
generic_textual MODERATE https://github.com/moodle/moodle/commit/d9596365e59ac53787105ff326f7f2bab5b9bada
generic_textual MODERATE https://github.com/moodle/moodle/commit/e6499fb8a4463b1130babb09c42f3d5559276d17
generic_textual MODERATE https://github.com/moodle/moodle/commit/fa0777902633b54ca5566dd8af304ce5587051e5
generic_textual MODERATE https://moodle.org/mod/forum/discuss.php?d=256419
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2014-0123
Reference id Reference type URL
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39990
http://openwall.com/lists/oss-security/2014/03/17/1
https://api.first.org/data/v1/epss?cve=CVE-2014-0123
https://github.com/moodle/moodle
https://github.com/moodle/moodle/commit/3a7b9b76c2d3c58237bec56b3b537e05c23970ad
https://github.com/moodle/moodle/commit/d9596365e59ac53787105ff326f7f2bab5b9bada
https://github.com/moodle/moodle/commit/e6499fb8a4463b1130babb09c42f3d5559276d17
https://github.com/moodle/moodle/commit/fa0777902633b54ca5566dd8af304ce5587051e5
https://moodle.org/mod/forum/discuss.php?d=256419
https://nvd.nist.gov/vuln/detail/CVE-2014-0123
GHSA-2vhr-4mhq-m35c https://github.com/advisories/GHSA-2vhr-4mhq-m35c
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.41647
EPSS Score 0.00193
Published At June 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-01T12:29:07.328269+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-2vhr-4mhq-m35c/GHSA-2vhr-4mhq-m35c.json 36.1.3