{"id":"CVE-2009-4299","aliases":["DSA-1986-1","EUVD-2009-4267","GHSA-rj5x-jhhc-5x6h"],"status":"published","title":"mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9...","description":"mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02098,"percentile":0.81804,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2009-12-16T01:00:00Z","modified":"2026-06-16T23:13:23Z","affected":[{"source":"osv","ecosystem":"Debian:5.0","package":"moodle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2.dfsg-3+lenny3"}]}],"versions":["1.8.2.dfsg-3","1.8.2.dfsg-3+lenny1","1.8.2.dfsg-3+lenny2"],"bundled":7}],"products":[{"vendor":"moodle","product":"moodle"}],"references":[{"url":"http://docs.moodle.org/en/Moodle_1.9.7_release_notes","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://docs.moodle.org/en/Moodle_1.8.11_release_notes","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://www.vupen.com/english/advisories/2009/3455","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/37614","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://moodle.org/mod/forum/discuss.php?d=139103","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/37244","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-4299"},{"url":"https://github.com/advisories/GHSA-rj5x-jhhc-5x6h"}],"sources":{"cve":[{"id":"CVE-2009-4299","description":"mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.","status":"published","published":"2009-12-16T01:00:00Z","modified":"2024-09-16T16:18:45.507Z","updated_at":"2026-11-02T14:33:24.782697Z"}],"euvd":[{"id":"EUVD-2009-4267","description":"mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.","status":"published","published":"2009-12-16T01:00:00Z","modified":"2024-09-16T16:18:45Z","updated_at":"2026-11-03T00:55:52.590586Z"}],"ghsa":[{"id":"GHSA-rj5x-jhhc-5x6h","title":"mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9...","description":"mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.","status":"published","published":"2022-05-02T03:53:19Z","modified":"2023-01-31T05:09:28Z","updated_at":"2026-11-02T14:49:30.8182Z"}],"nvd":[{"id":"CVE-2009-4299","description":"mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.","status":"published","published":"2009-12-16T01:30:00.377Z","modified":"2026-06-16T23:13:23.607Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:01:37.939838Z"}],"osv":[{"id":"DSA-1986-1","title":"moodle - several vulnerabilities","status":"published","published":"2010-02-02T00:00:00Z","modified":"2026-03-09T01:21:27.020963Z","updated_at":"2026-11-02T15:46:15.108335Z"}]}}