VULNERABILITY INTELLIGENCE

CVE-2013-1835

CVSS score3.5 LOW
EPSS probability1.71%
CISA KEVNot currently listed
Published2013-03-25
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:P/I:N/A:N

Description

Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated administrators to obtain sensitive information from the external repositories of arbitrary users by leveraging the login_as feature.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references