CVE-2013-4524: Path Traversal
Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a path.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4524?
CVE-2013-4524 has a medium severity rating due to the directory traversal vulnerability that allows unauthorized access to files.
How do I fix CVE-2013-4524?
To fix CVE-2013-4524, upgrade your Moodle installation to version 2.5.3 or later.
Which versions of Moodle are affected by CVE-2013-4524?
CVE-2013-4524 affects Moodle versions from 2.2.11 up to 2.4.6, among others.
What type of vulnerability is CVE-2013-4524?
CVE-2013-4524 is identified as a directory traversal vulnerability that allows remote authenticated users to access arbitrary files.
Can CVE-2013-4524 be exploited without authentication?
No, CVE-2013-4524 requires authentication, meaning an attacker must first log in as a user.