Information Disclosure

Moodle is vulnerable to information disclosure attacks. Authenticated users can leverage a flaw in mod/lesson/pagetypes/matching.php to obtain question answers through ID values by reading the HTML source code...

CVE-2013-2243

This CVE concerns Moodle: mod/lesson/pagetypes/matching.php allows remote authenticated users to read the HTML source of a document and obtain sensitive answer information. Affected are Moodle releases up to 2.2.11; 2.3.x before 2.3.8; 2.4.x before 2.4.5; and 2.5.x before 2.5.1. The vulnerability...