CVE-2014-0218: XSS

Q: What is the severity of CVE-2014-0218?

CVE-2014-0218 is classified as a medium severity vulnerability due to its potential for XSS attacks.

Q: How do I fix CVE-2014-0218?

To fix CVE-2014-0218, upgrade your Moodle installation to version 2.6.3 or later, 2.5.6 or later, or 2.4.10 or later.

Q: Which versions of Moodle are affected by CVE-2014-0218?

CVE-2014-0218 affects Moodle versions through 2.3.11, and all versions before 2.4.10, 2.5.6, and 2.6.3.

Q: What kind of attack does CVE-2014-0218 enable?

CVE-2014-0218 allows remote attackers to inject arbitrary web scripts or HTML via unspecified methods.

Q: Is there a patch available for CVE-2014-0218?

Yes, patches are available by upgrading to the specified remedial versions of Moodle.

Published May 27, 2014

Updated

Cross-site scripting (XSS) vulnerability in the URL downloader repository in repository/url/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

67 affected componentsFixes available

composer/moodle/moodle>=2.6.0<2.6.3

2.6.3

composer/moodle/moodle>=2.5.0<2.5.6

2.5.6

composer/moodle/moodle<2.4.10

2.4.10

Moodle moodle<=2.3.11

Moodle moodle=2.0.0

Moodle moodle=2.0.1

Moodle moodle=2.0.2

Moodle moodle=2.0.3

Moodle moodle=2.0.4

Moodle moodle=2.0.5

Moodle moodle=2.0.6

Moodle moodle=2.0.7

Moodle moodle=2.0.8

Moodle moodle=2.0.9

Moodle moodle=2.1.0

Moodle moodle=2.1.1

Moodle moodle=2.1.2

Moodle moodle=2.1.3

Moodle moodle=2.1.4

Moodle moodle=2.1.5

Moodle moodle=2.1.6

Moodle moodle=2.1.7

Moodle moodle=2.1.8

Moodle moodle=2.1.9

Moodle moodle=2.1.10

Moodle moodle=2.2.0

Moodle moodle=2.2.1

Moodle moodle=2.2.2

Moodle moodle=2.2.3

Moodle moodle=2.2.4

Moodle moodle=2.2.5

Moodle moodle=2.2.6

Moodle moodle=2.2.7

Moodle moodle=2.2.8

Moodle moodle=2.2.9

Moodle moodle=2.2.10

Moodle moodle=2.2.11

Moodle moodle=2.3.0

Moodle moodle=2.3.1

Moodle moodle=2.3.2

Moodle moodle=2.3.3

Moodle moodle=2.3.4

Moodle moodle=2.3.5

Moodle moodle=2.3.6

Moodle moodle=2.3.7

Moodle moodle=2.3.8

Moodle moodle=2.3.9

Moodle moodle=2.3.10

Moodle moodle=2.4.0

Moodle moodle=2.4.1

Moodle moodle=2.4.2

Moodle moodle=2.4.3

Moodle moodle=2.4.4

Moodle moodle=2.4.5

Moodle moodle=2.4.6

Moodle moodle=2.4.7

Moodle moodle=2.4.8

Moodle moodle=2.4.9

Moodle moodle=2.5.0

Moodle moodle=2.5.1

Moodle moodle=2.5.2

Moodle moodle=2.5.3

Moodle moodle=2.5.4

Moodle moodle=2.5.5

Moodle moodle=2.6.0

Moodle moodle=2.6.1

Moodle moodle=2.6.2

Event History

May 27, 2014

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·12:55 AM

DescriptionSeverityWeaknessAffected Software

May 13, 2022

Advisory Published

via GitHub·01:12 AM

Frequently Asked Questions

What is the severity of CVE-2014-0218?

CVE-2014-0218 is classified as a medium severity vulnerability due to its potential for XSS attacks.

How do I fix CVE-2014-0218?

To fix CVE-2014-0218, upgrade your Moodle installation to version 2.6.3 or later, 2.5.6 or later, or 2.4.10 or later.

Which versions of Moodle are affected by CVE-2014-0218?

CVE-2014-0218 affects Moodle versions through 2.3.11, and all versions before 2.4.10, 2.5.6, and 2.6.3.

What kind of attack does CVE-2014-0218 enable?

CVE-2014-0218 allows remote attackers to inject arbitrary web scripts or HTML via unspecified methods.

Is there a patch available for CVE-2014-0218?