CVE-2013-1829

2013-03-2521:00:00

redhat

www.cve.org

moodle

calendar

subscriptions

information disclosure

cve-2013-1829

AI Score

5.7

Confidence

Low

EPSS

0.001

Percentile

46.1%

JSON

calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displaying calendar subscriptions, which allows remote authenticated users to obtain potentially sensitive information by leveraging the student role.