Moodle Form Elements Filtering CVE-2013-2083 Security Vulnerability

Bugtraq ID:	60024
Class:	Unknown
CVE:	CVE-2013-2083
Remote:	Yes
Local:	No
Published:	May 21 2013 12:00AM
Updated:	Apr 13 2015 10:07PM
Credit:	Dan Poltawski
Vulnerable:	Moodle Moodle 2.4.3 Moodle Moodle 2.3.6 Moodle Moodle 2.3.3 Moodle Moodle 2.3.2 Moodle Moodle 2.3.1 Moodle Moodle 2.2.9 Moodle Moodle 2.2.6 Moodle Moodle 2.2.5 Moodle Moodle 2.2.4 Moodle Moodle 2.2.3 Moodle Moodle 2.2.2 Moodle Moodle 2.2.1 Moodle Moodle 2.4.2 Moodle Moodle 2.4.1 Moodle Moodle 2.4 Moodle Moodle 2.3.5 Moodle Moodle 2.3.4 Moodle Moodle 2.3 Moodle Moodle 2.2.8 Moodle Moodle 2.2.7 Moodle Moodle 2.2
Not Vulnerable:	Moodle Moodle 2.4.4 Moodle Moodle 2.3.7 Moodle Moodle 2.2.10

Moodle Form Elements Filtering CVE-2013-2083 Security Vulnerability

Moodle is prone to a security vulnerability related to the filtering of form elements.

An attacker may exploit the issue to bypass the filters and perform unauthorized actions.

Moodle Form Elements Filtering CVE-2013-2083 Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Moodle Form Elements Filtering CVE-2013-2083 Security Vulnerability

References:

• Issue MDL-38885 (Moodle)
  
• Moodle Homepage (Moodle)
  
• Moodle security notifications public (Moodle)