Moodle CVE-2013-1834 Security Bypass Vulnerability

Bugtraq ID:	60041
Class:	Design Error
CVE:	CVE-2013-1834
Remote:	Yes
Local:	No
Published:	Mar 25 2013 12:00AM
Updated:	Apr 13 2015 10:13PM
Credit:	Jerome Mouneyrac
Vulnerable:	Moodle Moodle 2.3.3 Moodle Moodle 2.3.2 Moodle Moodle 2.3.1 Moodle Moodle 2.2.6 Moodle Moodle 2.2.5 Moodle Moodle 2.2.4 Moodle Moodle 2.2.3 Moodle Moodle 2.2.2 Moodle Moodle 2.2.1 Moodle Moodle 1.9.18 Moodle Moodle 1.9.17 Moodle Moodle 1.9.16 Moodle Moodle 1.9.14 Moodle Moodle 1.9.13 Moodle Moodle 1.9.12 Moodle Moodle 1.9.11 Moodle moodle 1.9.10 Moodle Moodle 1.9.10 Moodle Moodle 1.9.9 Moodle Moodle 1.9.8 Moodle Moodle 1.9.7 Moodle Moodle 1.9.6 Moodle Moodle 1.9.5 Moodle Moodle 1.9.4 Moodle Moodle 1.9.1 Moodle Moodle 2.4.1 Moodle Moodle 2.4 Moodle Moodle 2.3.4 Moodle Moodle 2.3 Moodle Moodle 2.2.7 Moodle Moodle 2.2 Moodle Moodle 1.9.3 Moodle Moodle 1.9.2 Moodle Moodle 1.9.15 Moodle Moodle 1.9
Not Vulnerable:	Moodle Moodle 2.4.3 Moodle Moodle 2.3.6 Moodle Moodle 2.2.9 Moodle Moodle 2.4.2 Moodle Moodle 2.3.5 Moodle Moodle 2.2.8

Moodle CVE-2013-1834 Security Bypass Vulnerability

An attacker can use a browser to exploit this issue.

Moodle CVE-2013-1834 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Moodle CVE-2013-1834 Security Bypass Vulnerability

References:

• Moodle Homepage (Moodle)
  
• MSA-13-0017: Form manipulation issue in notes (Jérôme Mouneyrac)