CVE-2013-2082

Packagist/moodle/moodle CVE-2013-2082: medium

Moodle does not enforce capability requirements for reading blog comments

Action: Upgrade moodle/moodle to 2.2.10 or later.

composer require moodle/moodle:2.2.10

composer require moodle/moodle:2.3.7

composer require moodle/moodle:2.4.4

Affected

Fixed versions

Sources

• osv: GHSA-wp3g-pr4h-q6vv
• https://nvd.nist.gov/vuln/detail/CVE-2013-2082
• https://github.com/moodle/moodle/commit/28772fb9e7e6be01b765fb721af16901bb47e417
• https://github.com/moodle/moodle/commit/5fde58a59335bc3109a9eaac4a15d1e9217541c3
• https://github.com/moodle/moodle/commit/8aa12adcf26ff2f0b61cd6f0288f2886c8c55bf7
• https://github.com/moodle/moodle/commit/9a909b1a359f72b8d384e18da8e05474604279e1
• https://github.com/moodle/moodle/commit/cb538f0e539e833edb7cf6fa3d705e8abc5003fd
• https://github.com/moodle/moodle/commit/f9e27e8323f31186820d25252ec0d4c6cd65dafc
• https://github.com/moodle/moodle
• https://moodle.org/mod/forum/discuss.php?d=228934
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37245
• http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html
• http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html
• http://openwall.com/lists/oss-security/2013/05/21/1

CVE-2013-2082 · published 2022-05-13T01:12:59Z · modified 2024-12-06T05:47:38.454493Z · JSON