CVE ID:	CVE-2013-2082
Description:	Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not enforce capability requirements for reading blog comments, which allows remote attackers to obtain sensitive information via a crafted request.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2082 FEDORA-2013-8668 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html FEDORA-2013-8692 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html FEDORA-2013-8702 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html [oss-security] 20130521 Moodle security notifications public http://openwall.com/lists/oss-security/2013/05/21/1 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37245 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37245 https://moodle.org/mod/forum/discuss.php?d=228934 https://moodle.org/mod/forum/discuss.php?d=228934