CVE-2013-1829

calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displaying calendar subscriptions, which allows…

published March 25, 2013

CVSS
—
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displaying calendar subscriptions, which allows remote authenticated users to obtain potentially sensitive information by leveraging the student role.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01118 · 65.8th percentile
Published
2013-03-25T21:00Z
EPSS history
Timeline
  • 25 MAR 21:00Z
    calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displaying calendar subscriptions, which allows…
    cvelistv5