CVE-2013-1836

Published: Mar 25, 2013Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not properly manage privileges for WebDAV repositories, which allows remote authenticated users to read, modify, or delete arbitrary site-wide repositories by leveraging certain read access.

Affected (36)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.0.0
Moodle Moodle	Version 2.0.1
Moodle Moodle	Version 2.0.2
Moodle Moodle	Version 2.0.3
Moodle Moodle	Version 2.0.4
Moodle Moodle	Version 2.0.5
Moodle Moodle	Version 2.0.6
Moodle Moodle	Version 2.0.7
Moodle Moodle	Version 2.0.8
Moodle Moodle	Version 2.0.9
Moodle Moodle	Version 2.1.0
Moodle Moodle	Version 2.1.10
Moodle Moodle	Version 2.1.1
Moodle Moodle	Version 2.1.2
Moodle Moodle	Version 2.1.3
Moodle Moodle	Version 2.1.4
Moodle Moodle	Version 2.1.5
Moodle Moodle	Version 2.1.6
Moodle Moodle	Version 2.1.7
Moodle Moodle	Version 2.1.8
Moodle Moodle	Version 2.1.9

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.2.0
Moodle Moodle	Version 2.2.1
Moodle Moodle	Version 2.2.2
Moodle Moodle	Version 2.2.3
Moodle Moodle	Version 2.2.4
Moodle Moodle	Version 2.2.5
Moodle Moodle	Version 2.2.6
Moodle Moodle	Version 2.2.7