Vulnerability Details CVE-2013-2081
Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not consider "don't send" attributes during hub registration, which allows remote hubs to obtain sensitive site information by reading form data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 75.1%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2013-2081
-
cpe:2.3:a:moodle:moodle:2.1.0
-
cpe:2.3:a:moodle:moodle:2.1.1
-
cpe:2.3:a:moodle:moodle:2.1.10
-
cpe:2.3:a:moodle:moodle:2.1.2
-
cpe:2.3:a:moodle:moodle:2.1.3
-
cpe:2.3:a:moodle:moodle:2.1.4
-
cpe:2.3:a:moodle:moodle:2.1.5
-
cpe:2.3:a:moodle:moodle:2.1.6
-
cpe:2.3:a:moodle:moodle:2.1.7
-
cpe:2.3:a:moodle:moodle:2.1.8
-
cpe:2.3:a:moodle:moodle:2.1.9
-
cpe:2.3:a:moodle:moodle:2.2.0
-
cpe:2.3:a:moodle:moodle:2.2.1
-
cpe:2.3:a:moodle:moodle:2.2.2
-
cpe:2.3:a:moodle:moodle:2.2.3
-
cpe:2.3:a:moodle:moodle:2.2.4
-
cpe:2.3:a:moodle:moodle:2.2.5
-
cpe:2.3:a:moodle:moodle:2.2.6
-
cpe:2.3:a:moodle:moodle:2.2.7
-
cpe:2.3:a:moodle:moodle:2.2.8
-
cpe:2.3:a:moodle:moodle:2.2.9
-
cpe:2.3:a:moodle:moodle:2.3.0
-
cpe:2.3:a:moodle:moodle:2.3.1
-
cpe:2.3:a:moodle:moodle:2.3.2
-
cpe:2.3:a:moodle:moodle:2.3.3
-
cpe:2.3:a:moodle:moodle:2.3.4
-
cpe:2.3:a:moodle:moodle:2.3.5
-
cpe:2.3:a:moodle:moodle:2.3.6
-
cpe:2.3:a:moodle:moodle:2.4.0
-
cpe:2.3:a:moodle:moodle:2.4.1
-
cpe:2.3:a:moodle:moodle:2.4.2
-
cpe:2.3:a:moodle:moodle:2.4.3