Unrated severityNVD Advisory· Published May 25, 2013· Updated Jun 16, 2026
CVE-2013-2079
CVE-2013-2079
Description
mod/assign/locallib.php in the assignment module in Moodle 2.3.x before 2.3.7 and 2.4.x before 2.4.4 does not consider capability requirements during the processing of ZIP assignment-archive download (aka downloadall) requests, which allows remote authenticated users to read other users' assignments by leveraging the student role.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:moodle:moodle:2.3.0:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:moodle:moodle:2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.4.3:*:*:*:*:*:*:*
- (no CPE)range: 2.3.x < 2.3.7, 2.4.x < 2.4.4
Patches
Vulnerability mechanics
References
5- lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.htmlnvd
- openwall.com/lists/oss-security/2013/05/21/1nvd
- moodle.org/mod/forum/discuss.phpnvd
News mentions
0No linked articles in our index yet.