Information disclosure in Moodle

CVE-2013-2243

mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by reading the HTML source code of a document.

Vulnerability class: Information Disclosure

EPSS: 0.014 (69.8th percentile) — read the EPSS interpretation.

Affected products

  • Moodle — versions 2.1.0, 2.1.1, 2.1.2
  • N/a — versions n/a

Weakness classification (CWE)

References