Description

Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated administrators to obtain sensitive information from the external repositories of arbitrary users by leveraging the login_as feature.

Remediation

References

CVE-2013-1835

Related Vulnerabilities

PHP Improper Input Validation Vulnerability (CVE-2016-4537)

PHP Improper Input Validation Vulnerability (CVE-2004-1019)

MySQL CVE-2023-22048 Vulnerability (CVE-2023-22048)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8153)

Oracle JRE CVE-2017-10281 Vulnerability (CVE-2017-10281)

Severity

Low

Classification

CVE-2013-1835 CWE-200

Tags

Missing Update Known Vulnerabilities