CVE-2013-2245

Published: Jul 29, 2013Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly implement the use of RSS tokens for impersonation, which allows remote authenticated users to obtain sensitive block information by reading an RSS feed.

Affected (36)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.1.0
Moodle Moodle	Version 2.1.10
Moodle Moodle	Version 2.1.1
Moodle Moodle	Version 2.1.2
Moodle Moodle	Version 2.1.3
Moodle Moodle	Version 2.1.4
Moodle Moodle	Version 2.1.5
Moodle Moodle	Version 2.1.6
Moodle Moodle	Version 2.1.7
Moodle Moodle	Version 2.1.8
Moodle Moodle	Version 2.1.9

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.2.0
Moodle Moodle	Version 2.2.10
Moodle Moodle	Version 2.2.1
Moodle Moodle	Version 2.2.2
Moodle Moodle	Version 2.2.3
Moodle Moodle	Version 2.2.4
Moodle Moodle	Version 2.2.5
Moodle Moodle	Version 2.2.6
Moodle Moodle	Version 2.2.7
Moodle Moodle	Version 2.2.8
Moodle Moodle	Version 2.2.9

Configuration C

8 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.3.0
Moodle Moodle	Version 2.3.1
Moodle Moodle	Version 2.3.2
Moodle Moodle	Version 2.3.3
Moodle Moodle	Version 2.3.4
Moodle Moodle	Version 2.3.5
Moodle Moodle	Version 2.3.6
Moodle Moodle	Version 2.3.7