CVE-2015-0215: Infoleak
Published Jun 1, 2015
·Updated
calendar/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to obtain sensitive calendar-event information via a web-services request.
Affected Software
25 affected componentsFixes available
composer/moodle/moodle>=2.8.0<2.8.2
2.8.2
composer/moodle/moodle>=2.7.0<2.7.4
2.7.4
composer/moodle/moodle<2.6.7
2.6.7
Moodle moodle<=2.5.9
Moodle moodle=2.5.0
Moodle moodle=2.5.1
Moodle moodle=2.5.2
Moodle moodle=2.5.3
Moodle moodle=2.5.4
Moodle moodle=2.5.5
Moodle moodle=2.5.6
Moodle moodle=2.5.7
Moodle moodle=2.5.8
Moodle moodle=2.6.0
Moodle moodle=2.6.1
Moodle moodle=2.6.2
Moodle moodle=2.6.3
Moodle moodle=2.6.4
Moodle moodle=2.6.5
Moodle moodle=2.6.6
Moodle moodle=2.7.0
Moodle moodle=2.7.1
Moodle moodle=2.7.2
Moodle moodle=2.7.3
Moodle moodle=2.8.0
Event History
Jun 1, 2015
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
May 13, 2022
Advisory Published
via GitHub·01:12 AM
Frequently Asked Questions
1
What is the severity of CVE-2015-0215?
CVE-2015-0215 is classified as a medium severity vulnerability affecting Moodle.
2
How do I fix CVE-2015-0215?
To resolve CVE-2015-0215, upgrade to Moodle version 2.6.7, 2.7.4, or 2.8.2 or later.
3
Who is affected by CVE-2015-0215?
CVE-2015-0215 affects remote authenticated users of Moodle versions 2.5.0 through 2.8.0.
4
What type of vulnerability is CVE-2015-0215?
CVE-2015-0215 is an information disclosure vulnerability that allows users to access sensitive calendar-event information.
5
Can I still use older versions of Moodle with CVE-2015-0215?
Using older versions of Moodle impacted by CVE-2015-0215 is not recommended due to security risks.