VDB
CVE-2013-2245
CVE-2013-2245
PUBLISHED
CVSS 4 MEDIUM
rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly implement the use of RSS tokens for impersonation, which allows remote authenticated users to obtain sensitive block information by reading an RSS feed.
EPSS 0.16% · 37.0th percentile
Risk Scores
CVSS 2.0
4
EPSS Score
0.16%
37.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| moodle | moodle | 2.1.1, 2.1.2, 2.1.4 |
Timeline
- Jul 26, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
References
- https://moodle.org/mod/forum/discuss.php?d=232496 advisory
- https://moodle.org/mod/forum/discuss.php?d=232502 advisory
- https://moodle.org/mod/forum/discuss.php?d=232498 advisory
- https://moodle.org/mod/forum/discuss.php?d=232501 advisory
- https://moodle.org/mod/forum/discuss.php?d=232503 advisory
- https://moodle.org/mod/forum/discuss.php?d=232500 advisory
- https://moodle.org/mod/forum/discuss.php?d=232497 advisory
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37818 url
- https://nvd.nist.gov/vuln/detail/CVE-2013-2245 advisory