CVE-2013-1836: Medium severity moodle vulnerability
Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not properly manage privileges for WebDAV repositories, which allows remote authenticated users to read, modify, or delete arbitrary site-wide repositories by leveraging certain read access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1836?
CVE-2013-1836 is considered a medium severity vulnerability due to its potential for privilege escalation affecting WebDAV repositories in Moodle.
How do I fix CVE-2013-1836?
To fix CVE-2013-1836, upgrade Moodle to versions 2.4.2, 2.3.5, or 2.2.8 or later.
What systems are affected by CVE-2013-1836?
CVE-2013-1836 affects Moodle versions 2.0.0 to 2.4.1, specifically those versions prior to the patched versions mentioned.
Can CVE-2013-1836 be exploited remotely?
Yes, CVE-2013-1836 can be exploited by remote authenticated users who can gain unauthorized access to read, modify, or delete site-wide repositories.
What is the root cause of CVE-2013-1836?
The root cause of CVE-2013-1836 is improper management of privileges for WebDAV repositories in the affected versions of Moodle.