CVE-2012-2355: Medium severity moodle vulnerability
Published Jul 21, 2012
·Updated
Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass question:use capability requirements and add arbitrary questions to a quiz via the questions feature.
Affected Software
9 affected components
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Moodle moodle=2.1.2
Moodle moodle=2.1.3
Moodle moodle=2.1.4
Moodle moodle=2.1.5
Moodle moodle=2.2.0
Moodle moodle=2.2.1
Moodle moodle=2.2.2
Event History
Jul 21, 2012
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2355?
CVE-2012-2355 has a medium severity score due to its ability to allow remote authenticated users to bypass question capabilities and add arbitrary questions to a quiz.
2
How do I fix CVE-2012-2355?
To fix CVE-2012-2355, update your Moodle instance to version 2.1.6 or 2.2.3 or later.
3
Which versions of Moodle are affected by CVE-2012-2355?
CVE-2012-2355 affects Moodle versions 2.1.0 through 2.1.5 and 2.2.0 through 2.2.2.
4
What type of vulnerabilities does CVE-2012-2355 represent?
CVE-2012-2355 represents an authorization bypass vulnerability that allows users to modify quiz questions.
5
Who can exploit CVE-2012-2355?
CVE-2012-2355 can be exploited by remote authenticated users who have access to the questions feature in Moodle.