mod/wiki/admin.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to remove wiki pages by leveraging delete access within a different subwiki.
Advisories
Source ID Title
EUVD EUVD EUVD-2022-4667 mod/wiki/admin.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allows remote authenticated users to remove wiki pages by leveraging delete access within a different subwiki.
Github GHSA Github GHSA GHSA-p3hj-cfhm-7g6v Moodle allows attackers to remove wiki pages
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2024-08-06T13:03:27.348Z

Reserved: 2014-10-03T00:00:00

Link: CVE-2014-7837

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2014-11-24T11:59:07.913

Modified: 2025-04-12T10:46:40.837

Link: CVE-2014-7837

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.