CVE-2012-5481

Moodle 2.3.x - Authenticated Capability Data Exposure via Check Permissions Page

Title source: llm
STIX 2.1

Description

Moodle 2.3.x before 2.3.3 allows remote authenticated users to bypass the moodle/role:manage capability requirement and read all capability data by visiting the Check Permissions page.

References (4)

Core 4
Core References
Vendor Advisory x_refsource_confirm
https://moodle.org/mod/forum/discuss.php?d=216161
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/56505
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2012/11/19/1

Scores

EPSS 0.0015
EPSS Percentile 35.2%

Details

CWE
CWE-264
Status published
Products (3)
moodle/moodle 2.3.0
moodle/moodle 2.3.1
moodle/moodle 2.3.2
Published Nov 21, 2012
Tracked Since Feb 18, 2026