CVE-2013-2082: Medium severity moodle vulnerability
Published May 25, 2013
·Updated
Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not enforce capability requirements for reading blog comments, which allows remote attackers to obtain sensitive information via a crafted request.
Affected Software
35 affected componentsFixes available
composer/moodle/moodle>=2.4.0<2.4.4
2.4.4
composer/moodle/moodle>=2.3.0<2.3.7
2.3.7
composer/moodle/moodle<2.2.10
2.2.10
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Moodle moodle=2.1.2
Moodle moodle=2.1.3
Moodle moodle=2.1.4
Moodle moodle=2.1.5
Moodle moodle=2.1.6
Moodle moodle=2.1.7
Moodle moodle=2.1.8
Moodle moodle=2.1.9
Moodle moodle=2.1.10
Moodle moodle=2.2.0
Moodle moodle=2.2.1
Moodle moodle=2.2.2
Moodle moodle=2.2.3
Moodle moodle=2.2.4
Moodle moodle=2.2.5
Moodle moodle=2.2.6
Moodle moodle=2.2.7
Moodle moodle=2.2.8
Moodle moodle=2.2.9
Moodle moodle=2.3.0
Moodle moodle=2.3.1
Moodle moodle=2.3.2
Moodle moodle=2.3.3
Moodle moodle=2.3.4
Moodle moodle=2.3.5
Moodle moodle=2.3.6
Moodle moodle=2.4.0
Moodle moodle=2.4.1
Moodle moodle=2.4.2
Moodle moodle=2.4.3
Remediation
Event History
May 25, 2013
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
May 13, 2022
Advisory Published
via GitHub·01:12 AM
Frequently Asked Questions
1
What is the severity of CVE-2013-2082?
CVE-2013-2082 has a medium severity rating due to the potential for unauthorized access to sensitive information.
2
How do I fix CVE-2013-2082?
To fix CVE-2013-2082, upgrade to Moodle versions 2.2.10, 2.3.7, or 2.4.4 or later.
3
What versions are affected by CVE-2013-2082?
CVE-2013-2082 affects Moodle versions through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4.
4
Can CVE-2013-2082 be exploited remotely?
Yes, CVE-2013-2082 can be exploited remotely by attackers through crafted requests.
5
What kind of information can be exposed due to CVE-2013-2082?
CVE-2013-2082 may expose sensitive information contained in blog comments.