CVE-2013-1836

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.96%

Published

Mar 25, 2013

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not properly manage privileges for WebDAV repositories, which allows remote authenticated users to read, modify, or delete arbitrary site-wide repositories by leveraging certain read access.

Weaknesses (CWE)

CWE-264

Affected Products (36)

moodle · moodlevulnerable

moodle · moodle

References (10)

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37852

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html

http://openwall.com/lists/oss-security/2013/03/25/2

https://moodle.org/mod/forum/discuss.php?d=225348

Vendor Advisory

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37852

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101310.html

http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101358.html

KEV Catalog EPSS Scores Vendors All CVEs