CVE-2013-2083
Severity CVSS v4.0:
Pending analysis
Type:
CWE-20
Input Validation
Publication date:
25/05/2013
Last modified:
11/04/2025
Description
The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a certain array-element syntax, which allows remote attackers to bypass intended form-data filtering via a crafted request.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.1.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.1.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.1.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.1.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.1.6:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.1.7:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.1.8:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.1.9:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.1.10:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.2.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.2.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:moodle:moodle:2.2.3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38885
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html
- http://openwall.com/lists/oss-security/2013/05/21/1
- https://moodle.org/mod/forum/discuss.php?d=228935
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38885
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html
- http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html
- http://openwall.com/lists/oss-security/2013/05/21/1
- https://moodle.org/mod/forum/discuss.php?d=228935