CVE-2013-1834: Medium severity moodle vulnerability
Published Mar 25, 2013
·Updated
notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified (1) userid or (2) courseid field.
Affected Software
58 affected componentsFixes available
composer/moodle/moodle>=2.4.0<2.4.2
2.4.2
composer/moodle/moodle>=2.3.0<2.3.5
2.3.5
composer/moodle/moodle>=1.9.0<2.2.8
2.2.8
Moodle moodle=1.9.1
Moodle moodle=1.9.2
Moodle moodle=1.9.3
Moodle moodle=1.9.4
Moodle moodle=1.9.5
Moodle moodle=1.9.6
Moodle moodle=1.9.7
Moodle moodle=1.9.8
Moodle moodle=1.9.9
Moodle moodle=1.9.10
Moodle moodle=1.9.11
Moodle moodle=1.9.12
Moodle moodle=1.9.13
Moodle moodle=1.9.14
Moodle moodle=1.9.15
Moodle moodle=1.9.16
Moodle moodle=1.9.17
Moodle moodle=1.9.18
Moodle moodle=1.9.19
Moodle moodle=2.0.0
Moodle moodle=2.0.1
Moodle moodle=2.0.2
Moodle moodle=2.0.3
Moodle moodle=2.0.4
Moodle moodle=2.0.5
Moodle moodle=2.0.6
Moodle moodle=2.0.7
Moodle moodle=2.0.8
Moodle moodle=2.0.9
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Moodle moodle=2.1.2
Moodle moodle=2.1.3
Moodle moodle=2.1.4
Moodle moodle=2.1.5
Moodle moodle=2.1.6
Moodle moodle=2.1.7
Moodle moodle=2.1.8
Moodle moodle=2.1.9
Moodle moodle=2.1.10
Moodle moodle=2.2.0
Moodle moodle=2.2.1
Moodle moodle=2.2.2
Moodle moodle=2.2.3
Moodle moodle=2.2.4
Moodle moodle=2.2.5
Moodle moodle=2.2.6
Moodle moodle=2.2.7
Moodle moodle=2.3.0
Moodle moodle=2.3.1
Moodle moodle=2.3.2
Moodle moodle=2.3.3
Moodle moodle=2.3.4
Moodle moodle=2.4.0
Moodle moodle=2.4.1
Remediation
Event History
Mar 25, 2013
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
May 13, 2022
Advisory Published
via GitHub·01:12 AM
Frequently Asked Questions
1
What is the severity of CVE-2013-1834?
CVE-2013-1834 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2013-1834?
To fix CVE-2013-1834, upgrade to Moodle version 2.4.2, 2.3.5, or 2.2.8 or later.
3
Who is affected by CVE-2013-1834?
CVE-2013-1834 affects remote authenticated users on Moodle versions 1.9.x, 2.x, and specific earlier releases.
4
What type of vulnerability is CVE-2013-1834?
CVE-2013-1834 is an authorization vulnerability that allows reassignment of notes.
5
Is there a workaround for CVE-2013-1834 if I can't upgrade?
There is no official workaround for CVE-2013-1834; upgrading to a fixed version is recommended.