Description

Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated administrators to obtain sensitive information from the external repositories of arbitrary users by leveraging the login_as feature.

Remediation

References

CVE-2013-1835

Related Vulnerabilities

MySQL CVE-2024-21130 Vulnerability (CVE-2024-21130)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4608)

Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2021-36023)

WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Information Disclosure (2.1.3)

WordPress 4.3.x Cross-Site Request Forgery (4.3 - 4.3.18)

Severity

Low

Classification

CVE-2013-1835 CWE-200

Tags

Missing Update Known Vulnerabilities