CVE-2012-6105

Published Jan 27, 2013 CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed
Description
blog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 continues to provide a blog RSS feed after blogging is disabled, which allows remote attackers to obtain sensitive information by reading this feed.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-5974 blog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 continues to provide a blog RSS feed after blogging is disabled, which allows remote attackers to obtain sensitive information by reading this feed.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Sep 16, 2024, 11:56 PM
Reserved
Dec 6, 2012, 12:00 AM
Status
Modified
Published
Jan 27, 2013, 10:55 PM
Modified
Jun 16, 2026, 11:47 PM