CVE-2013-1829

The CVE-2013-1829 entry concerns Moodle 2.4.x (before 2.4.2). The issue is in calendar/managesubscriptions.php where capability requirements are not checked before displaying calendar subscriptions, enabling remote authenticated users to view potentially sensitive information by using the student...

CVE-2013-1829

calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displaying calendar subscriptions, which allows remote authenticated users to obtain potentially sensitive information by leveraging the student role...