CVE-2012-0795: Input Validation
Published Jul 17, 2012
·Updated
Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail address settings, which allows remote authenticated users to have an unspecified impact via a crafted address.
Affected Software
27 affected components
Moodle moodle=1.9.1
Moodle moodle=1.9.2
Moodle moodle=1.9.3
Moodle moodle=1.9.4
Moodle moodle=1.9.5
Moodle moodle=1.9.6
Moodle moodle=1.9.7
Moodle moodle=1.9.8
Moodle moodle=1.9.9
Moodle moodle=1.9.10
Moodle moodle=1.9.11
Moodle moodle=1.9.12
Moodle moodle=1.9.13
Moodle moodle=1.9.14
Moodle moodle=1.9.15
Moodle moodle=2.0.0
Moodle moodle=2.0.1
Moodle moodle=2.0.2
Moodle moodle=2.0.3
Moodle moodle=2.0.4
Moodle moodle=2.0.5
Moodle moodle=2.0.6
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Moodle moodle=2.1.2
Moodle moodle=2.1.3
Moodle moodle=2.2.0
Event History
Jul 17, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0795?
CVE-2012-0795 has a medium severity rating due to insufficient email address validation.
2
How do I fix CVE-2012-0795?
To fix CVE-2012-0795, update Moodle to version 1.9.16, 2.0.7, 2.1.4, or 2.2.1 or later.
3
What versions of Moodle are affected by CVE-2012-0795?
CVE-2012-0795 affects Moodle versions 1.9.x before 1.9.16 and 2.0.x through 2.2.x before their respective updates.
4
What vulnerabilities are associated with CVE-2012-0795?
CVE-2012-0795 may allow remote authenticated users to manipulate email settings potentially impacting user account security.
5
Is there a workaround for CVE-2012-0795?
There is no official workaround for CVE-2012-0795; updating to a secure version is the recommended action.