mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by reading the HTML source code of a document.
References
Link | Resource |
---|---|
http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-39546 | |
https://moodle.org/mod/forum/discuss.php?d=232500 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
No history.
Information
Published : 2013-07-29 13:59
Updated : 2024-02-04 18:16
NVD link : CVE-2013-2243
Mitre link : CVE-2013-2243
CVE.ORG link : CVE-2013-2243
JSON object : View
Products Affected
moodle
- moodle
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor