CVE-2016-5013: Medium severity Moodle moodle vulnerability
Published Jan 20, 2017
·Updated
In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam.
Affected Software
32 affected componentsFixes available
composer/moodle/moodle>=3.1<3.1.1
3.1.1
composer/moodle/moodle>=2.7<=2.7.14
2.7.15
composer/moodle/moodle>=2.8<=2.8.12
composer/moodle/moodle>=2.9<=2.9.6
2.9.7
composer/moodle/moodle>=3.0<=3.0.4
3.0.5
Moodle moodle<=2.7.14
Moodle moodle=2.8.0
Moodle moodle=2.8.1
Moodle moodle=2.8.2
Moodle moodle=2.8.3
Moodle moodle=2.8.4
Moodle moodle=2.8.5
Moodle moodle=2.8.6
Moodle moodle=2.8.7
Moodle moodle=2.8.8
Moodle moodle=2.8.9
Moodle moodle=2.8.10
Moodle moodle=2.8.11
Moodle moodle=2.8.12
Moodle moodle=2.9.0
Moodle moodle=2.9.1
Moodle moodle=2.9.2
Moodle moodle=2.9.3
Moodle moodle=2.9.4
Moodle moodle=2.9.5
Moodle moodle=2.9.6
Moodle moodle=3.0.0
Moodle moodle=3.0.1
Moodle moodle=3.0.2
Moodle moodle=3.0.3
Moodle moodle=3.0.4
Moodle moodle=3.1.0
Remediation
Patch Available
Event History
Jan 20, 2017
CVE Published
via MITRE·08:39 AM
Data Sourced
via MITRE·08:39 AM
Description
Data Sourced
via NVD·08:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
May 13, 2022
Advisory Published
01:12 AM
Frequently Asked Questions
1
What is the severity of CVE-2016-5013?
The severity of CVE-2016-5013 is classified as moderate, as it poses a risk of outbound spam through email headers.
2
How do I fix CVE-2016-5013?
To fix CVE-2016-5013, upgrade to Moodle versions 3.1.1, 3.0.5, 2.9.7, or 2.7.15.
3
Which versions of Moodle are affected by CVE-2016-5013?
CVE-2016-5013 affects Moodle versions 2.7.x, 2.8.x, 2.9.x, 3.0.x, and 3.1.0.
4
Is there a workaround for CVE-2016-5013 if I can't update immediately?
There is no official workaround for CVE-2016-5013, updating to a non-vulnerable version is recommended.
5
Can CVE-2016-5013 be exploited remotely?
Yes, CVE-2016-5013 can be exploited remotely if an attacker can manipulate email headers.