Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2014-0123 - Vulnerability Database
Moodle

Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2014-0123

Medium
Reference: CVE-2014-0123
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-0123
Title: Moodle Permissions Privileges and Access Controls Vulnerability
Overview:

The wiki subsystem in Moodle through 2.3.11 2.4.x before 2.4.9 2.5.x before 2.5.5 and 2.6.x before 2.6.2 does not properly restrict (1) view and (2) edit access which allows remote authenticated users to perform wiki operations by leveraging the student role and using the Recent Activity block to reach the individual wiki of an arbitrary student.