Moodle CVE-2013-1835 Information Disclosure Vulnerability

Bugtraq ID:	60047
Class:	Unknown
CVE:	CVE-2013-1835
Remote:	Yes
Local:	No
Published:	Mar 25 2013 12:00AM
Updated:	Apr 16 2015 05:48PM
Credit:	Andrew Nicols
Vulnerable:	Moodle Moodle 2.2.3 Moodle Moodle 2.2.2 Moodle Moodle 2.2.1 Moodle Moodle 2.2
Not Vulnerable:

Moodle CVE-2013-1835 Information Disclosure Vulnerability

Moodle is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.

Note: This issue was previously discussed in BID 58660 (Moodle Multiple Remote Security Vulnerabilities), but has been moved to its own record for better documentation.

The following versions are affected:

Moodle 2.4 and 2.4.1
Moodle 2.2 through versions 2.2.7
Moodle 2.3 through versions 2.3.4

Moodle CVE-2013-1835 Information Disclosure Vulnerability

An attacker can use a browser to exploit this issue.

Moodle CVE-2013-1835 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Moodle CVE-2013-1835 Information Disclosure Vulnerability

References:

• Moodle Homepage (Moodle)
  
• MSA-13-0018: Personal information leak through repositories (Moodle)