CVE-2013-2246

Moodle <= 2.1.10, 2.2.x < 2.2.11, 2.3.x < 2.3.8, 2.4.x < 2.4.5, 2.5.x < 2.5.1 - Authenticated Information Disclosure

Title source: llm
STIX 2.1

Description

mod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/feedback:view capability before displaying recent feedback, which allows remote authenticated users to obtain sensitive information via a request for all course feedback that has occurred since a specified time.

References (2)

Core 2

Scores

EPSS 0.0018
EPSS Percentile 38.7%

Details

CWE
CWE-264
Status published
Products (36)
moodle/moodle 2.1.0
moodle/moodle 2.1.1
moodle/moodle 2.1.2
moodle/moodle 2.1.3
moodle/moodle 2.1.4
moodle/moodle 2.1.5
moodle/moodle 2.1.6
moodle/moodle 2.1.7
moodle/moodle 2.1.8
moodle/moodle 2.1.9
... and 26 more
Published Jul 29, 2013
Tracked Since Feb 18, 2026