Beveiligingsadvies

CVE-2013-2245

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2013-07-26 22:00:00

Laatst bijgewerkt 2024-09-16 18:43:55

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly implement the use of RSS tokens for impersonation, which allows remote authenticated users to obtain sensitive block information by reading an RSS feed.

← Alle CVE's bekijken Bekijk op cve.org ↗