GHSA-m63h-q4x3-6hwj

Suggest an improvement
Source
https://github.com/advisories/GHSA-m63h-q4x3-6hwj
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-m63h-q4x3-6hwj/GHSA-m63h-q4x3-6hwj.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-m63h-q4x3-6hwj
Aliases
  • CVE-2013-2083
Published
2022-05-13T01:12:59Z
Modified
2024-12-06T05:39:09Z
Summary
Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class
Details

The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a certain array-element syntax, which allows remote attackers to bypass intended form-data filtering via a crafted request.

Database specific 
{
    "cwe_ids":  [
        "CWE-20"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2023-08-17T22:57:53Z",
    "nvd_published_at":  "2013-05-25T03:18:00Z",
    "severity":  "MODERATE"
}
References

Affected packages

Packagist / moodle/moodle

Package

Name
moodle/moodle
Purl
pkg:composer/moodle/moodle

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.2.10

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-m63h-q4x3-6hwj/GHSA-m63h-q4x3-6hwj.json"

Packagist / moodle/moodle

Package

Name
moodle/moodle
Purl
pkg:composer/moodle/moodle

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.3.0
Fixed
2.3.7

Affected versions

v2.*
v2.3.4
v2.3.5
v2.3.6

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-m63h-q4x3-6hwj/GHSA-m63h-q4x3-6hwj.json"

Packagist / moodle/moodle

Package

Name
moodle/moodle
Purl
pkg:composer/moodle/moodle

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.4.0
Fixed
2.4.4

Affected versions

v2.*
v2.4.0
v2.4.1
v2.4.2
v2.4.3

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-m63h-q4x3-6hwj/GHSA-m63h-q4x3-6hwj.json"