mod/wiki/admin.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to remove wiki pages by leveraging delete access within a different subwiki.
Advisories
Source ID Title
EUVD EUVD EUVD-2022-4667 mod/wiki/admin.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to remove wiki pages by leveraging delete access within a different subwiki.
Github GHSA Github GHSA GHSA-p3hj-cfhm-7g6v Moodle allows attackers to remove wiki pages
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-06T13:03:27.348Z

Reserved: 2014-10-03T00:00:00

Link: CVE-2014-7837

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2014-11-24T11:59:07.913

Modified: 2025-04-12T10:46:40.837

Link: CVE-2014-7837

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses