Servers and applications
CVE-2013-2243
mod/lesson/pagetypes/matching.php in Moodle through 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 allows remote authenticated users to obtain sensitive answer information by reading the HTML source code of a document.
- Severity
- Medium 4.0
- Published
- 29 Jul 2013
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 1.4% in the next 30 daysHigher than 72% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- Information exposure (CWE-200)
- Attack
- Over the network · Needs a login
- Attacker can
- Read some data
- CVSS vector
AV:N/AC:L/Au:S/C:P/I:N/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MoodleServers and applications · cpe:a:moodle:moodle |
All 36 release lines
|