CVE-2012-5480

The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.

Score

CVSS 2.0 6.4 Medium

Status

Modified - secalert@redhat.com

Published

2012-11-21

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Moodle (Moodle)

References

• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35558
• http://openwall.com/lists/oss-security/2012/11/19/1
• http://www.securityfocus.com/bid/56505
• https://moodle.org/mod/forum/discuss.php?d=216160