Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2013-2080 - Vulnerability Database
Moodle

Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2013-2080

Medium
Reference: CVE-2013-2080
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2013-2080
Title: Moodle Permissions Privileges and Access Controls Vulnerability
Overview:

The core_grade component in Moodle through 2.2.10 2.3.x before 2.3.7 and 2.4.x before 2.4.4 does not properly consider the existence of hidden grades which allows remote authenticated users to obtain sensitive information by leveraging the student role and reading the Gradebook Overview report.