Description

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.

Remediation

References

CVE-2009-4299

Related Vulnerabilities

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-14892)

Django Improper Input Validation Vulnerability (CVE-2012-4520)

Squid Improper Input Validation Vulnerability (CVE-2016-4555)

WordPress Plugin Hupso Share Buttons for Twitter, Facebook & Google+ Multiple Unspecified Vulnerabilities (4.0.3)

Oracle JRE CVE-2013-2464 Vulnerability (CVE-2013-2464)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2009-4299