First published: Sat May 25 2013(Updated: )
Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not consider "don't send" attributes during hub registration, which allows remote hubs to obtain sensitive site information by reading form data.
Credit: secalert@redhat.com secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Moodle Moodle | =2.1.0 | |
Moodle Moodle | =2.1.1 | |
Moodle Moodle | =2.1.2 | |
Moodle Moodle | =2.1.3 | |
Moodle Moodle | =2.1.4 | |
Moodle Moodle | =2.1.5 | |
Moodle Moodle | =2.1.6 | |
Moodle Moodle | =2.1.7 | |
Moodle Moodle | =2.1.8 | |
Moodle Moodle | =2.1.9 | |
Moodle Moodle | =2.1.10 | |
Moodle Moodle | =2.2.0 | |
Moodle Moodle | =2.2.1 | |
Moodle Moodle | =2.2.2 | |
Moodle Moodle | =2.2.3 | |
Moodle Moodle | =2.2.4 | |
Moodle Moodle | =2.2.5 | |
Moodle Moodle | =2.2.6 | |
Moodle Moodle | =2.2.7 | |
Moodle Moodle | =2.2.8 | |
Moodle Moodle | =2.2.9 | |
Moodle Moodle | =2.3.0 | |
Moodle Moodle | =2.3.1 | |
Moodle Moodle | =2.3.2 | |
Moodle Moodle | =2.3.3 | |
Moodle Moodle | =2.3.4 | |
Moodle Moodle | =2.3.5 | |
Moodle Moodle | =2.3.6 | |
Moodle Moodle | =2.4.0 | |
Moodle Moodle | =2.4.1 | |
Moodle Moodle | =2.4.2 | |
Moodle Moodle | =2.4.3 | |
composer/moodle/moodle | >=2.4.0<2.4.4 | 2.4.4 |
composer/moodle/moodle | >=2.3.0<2.3.7 | 2.3.7 |
composer/moodle/moodle | <2.2.10 | 2.2.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.