← All advisories

Moderate severityNVD Advisory· Published Nov 14, 2019· Updated Aug 6, 2024

CVE-2012-1157

CVE-2012-1157

Description

Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
moodle/moodlePackagist	>= 2.2, < 2.2.2	2.2.2
moodle/moodlePackagist	>= 2.1, < 2.1.5	2.1.5
moodle/moodlePackagist	>= 2.0, < 2.0.8	2.0.8
moodle/moodlePackagist	< 1.9.17	1.9.17

Affected products

2

ghsa-coords
pkg:composer/moodle/moodle
Range: >= 2.2, < 2.2.2
Moodle/Moodlev5
Range: 2.2 to 2.2.1+

Patches

Vulnerability mechanics

References

12

github.com/advisories/GHSA-2x36-7xfm-pgm7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2012-1157ghsaADVISORY
lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.htmlghsax_refsource_MISCWEB
lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.htmlghsax_refsource_MISCWEB
lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.htmlghsax_refsource_MISCWEB
lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.htmlghsax_refsource_MISCWEB
lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.htmlghsax_refsource_MISCWEB
access.redhat.com/security/cve/cve-2012-1157ghsax_refsource_MISCWEB
bugzilla.redhat.com/show_bug.cgighsax_refsource_MISCWEB
github.com/moodle/moodle/commit/246c2cb8e5af71a7d7c605b8fc9f9563e0fb3bc4ghsaWEB
moodle.org/mod/forum/discuss.phpghsax_refsource_CONFIRMWEB
security-tracker.debian.org/tracker/CVE-2012-1157ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.