Description

Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not enforce capability requirements for reading blog comments, which allows remote attackers to obtain sensitive information via a crafted request.

Remediation

References

CVE-2013-2082

Related Vulnerabilities

TCExam Missing Authorization Vulnerability (CVE-2023-6554)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2963)

WordPress Plugin WP Business Intelligence Lite SQL Injection (1.6.1)

WordPress Plugin Bold Page Builder PHP Object Injection (3.1.5)

Drupal Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5593)

Severity

Medium

Classification

CVE-2013-2082 CWE-264

Tags

Missing Update Known Vulnerabilities