Moodle CVE-2013-1831 Information Disclosure Vulnerability

Bugtraq ID:	60031
Class:	Unknown
CVE:	CVE-2013-1831
Remote:	Yes
Local:	No
Published:	Mar 25 2013 12:00AM
Updated:	Apr 13 2015 10:20PM
Credit:	Mark Nielsen
Vulnerable:	Moodle Moodle 2.3.3 Moodle Moodle 2.3.2 Moodle Moodle 2.3.1 Moodle Moodle 2.2.6 Moodle Moodle 2.2.5 Moodle Moodle 2.2.4 Moodle Moodle 2.2.3 Moodle Moodle 2.2.2 Moodle Moodle 2.2.1 Moodle Moodle 2.4.1 Moodle Moodle 2.4 Moodle Moodle 2.3.4 Moodle Moodle 2.3 Moodle Moodle 2.2.7 Moodle Moodle 2.2
Not Vulnerable:	Moodle Moodle 2.4.2 Moodle Moodle 2.3.5 Moodle Moodle 2.2.8

Moodle CVE-2013-1831 Information Disclosure Vulnerability

Moodle is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.

Moodle versions prior to 2.4.2, 2.3.5, and 2.2.8 are vulnerable.

Note: This issue was previously discussed in BID 58660 (Moodle Multiple Remote Security Vulnerabilities), but has been moved to its own record for better documentation.

Moodle CVE-2013-1831 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Moodle CVE-2013-1831 Information Disclosure Vulnerability

References:

• Moodle Homepage (Moodle)
  
• MSA-13-0013: Server information revealed through exception messages (Mark Nielsen)