CVE-2013-1831: Infoleak
Published Mar 25, 2013
·Updated
lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive information via an invalid request, which reveals the absolute path in an exception message.
Affected Software
105 affected componentsFixes available
composer/moodle/moodle>=2.4.0<2.4.2
2.4.2
composer/moodle/moodle>=2.3.0<2.3.5
2.3.5
composer/moodle/moodle>=2.2.0<2.2.8
2.2.8
composer/moodle/moodle<=2.1.10
Moodle moodle=1.1.1
Moodle moodle=1.2.0
Moodle moodle=1.2.1
Moodle moodle=1.3.0
Moodle moodle=1.3.1
Moodle moodle=1.3.2
Moodle moodle=1.3.3
Moodle moodle=1.3.4
Moodle moodle=1.4.1
Moodle moodle=1.4.2
Moodle moodle=1.4.3
Moodle moodle=1.4.4
Moodle moodle=1.4.5
Moodle moodle=1.5
Moodle moodle=1.5.0-beta
Moodle moodle=1.5.1
Moodle moodle=1.5.2
Moodle moodle=1.5.3
Moodle moodle=1.6.0
Moodle moodle=1.6.1
Moodle moodle=1.6.2
Moodle moodle=1.6.3
Moodle moodle=1.6.4
Moodle moodle=1.6.5
Moodle moodle=1.6.6
Moodle moodle=1.6.7
Moodle moodle=1.6.8
Moodle moodle=1.7.1
Moodle moodle=1.7.2
Moodle moodle=1.7.3
Moodle moodle=1.7.4
Moodle moodle=1.7.5
Moodle moodle=1.7.6
Moodle moodle=1.8.1
Moodle moodle=1.8.2
Moodle moodle=1.8.3
Moodle moodle=1.8.4
Moodle moodle=1.8.5
Moodle moodle=1.8.6
Moodle moodle=1.8.7
Moodle moodle=1.8.8
Moodle moodle=1.8.9
Moodle moodle=1.8.10
Moodle moodle=1.8.11
Moodle moodle=1.8.12
Moodle moodle=1.8.13
Moodle moodle=1.8.14
Moodle moodle=1.9.1
Moodle moodle=1.9.2
Moodle moodle=1.9.3
Moodle moodle=1.9.4
Moodle moodle=1.9.5
Moodle moodle=1.9.6
Moodle moodle=1.9.7
Moodle moodle=1.9.8
Moodle moodle=1.9.9
Moodle moodle=1.9.10
Moodle moodle=1.9.11
Moodle moodle=1.9.12
Moodle moodle=1.9.13
Moodle moodle=1.9.14
Moodle moodle=1.9.15
Moodle moodle=1.9.16
Moodle moodle=1.9.17
Moodle moodle=1.9.18
Moodle moodle=2.0.0
Moodle moodle=2.0.1
Moodle moodle=2.0.2
Moodle moodle=2.0.3
Moodle moodle=2.0.4
Moodle moodle=2.0.5
Moodle moodle=2.0.6
Moodle moodle=2.0.7
Moodle moodle=2.0.8
Moodle moodle=2.0.9
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Moodle moodle=2.1.2
Moodle moodle=2.1.3
Moodle moodle=2.1.4
Moodle moodle=2.1.5
Moodle moodle=2.1.6
Moodle moodle=2.1.7
Moodle moodle=2.1.8
Moodle moodle=2.1.9
Moodle moodle=2.1.10
Moodle moodle=2.2.0
Moodle moodle=2.2.1
Moodle moodle=2.2.2
Moodle moodle=2.2.3
Moodle moodle=2.2.4
Moodle moodle=2.2.5
Moodle moodle=2.2.6
Moodle moodle=2.2.7
Moodle moodle=2.3.0
Moodle moodle=2.3.1
Moodle moodle=2.3.2
Moodle moodle=2.3.3
Moodle moodle=2.3.4
Moodle moodle=2.4.0
Moodle moodle=2.4.1
Remediation
Event History
Mar 25, 2013
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
May 13, 2022
Advisory Published
via GitHub·01:12 AM
Frequently Asked Questions
1
What is the severity of CVE-2013-1831?
CVE-2013-1831 has a medium severity rating due to the potential for sensitive information exposure.
2
How do I fix CVE-2013-1831?
To fix CVE-2013-1831, upgrade to Moodle version 2.4.2, 2.3.5, or 2.2.8 or later.
3
What type of vulnerability is CVE-2013-1831?
CVE-2013-1831 is an information disclosure vulnerability.
4
Which versions of Moodle are affected by CVE-2013-1831?
CVE-2013-1831 affects Moodle versions up to and including 2.1.10, as well as specific earlier versions of 2.2.x, 2.3.x, and 2.4.x.
5
What happens if I do not patch CVE-2013-1831?
Failing to patch CVE-2013-1831 could allow remote attackers to gain access to sensitive path information from the server.