CVE-2013-2081

Published: May 25, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not consider "don't send" attributes during hub registration, which allows remote hubs to obtain sensitive site information by reading form data.

Affected (32)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.1.0
Moodle Moodle	Version 2.1.10
Moodle Moodle	Version 2.1.1
Moodle Moodle	Version 2.1.2
Moodle Moodle	Version 2.1.3
Moodle Moodle	Version 2.1.4
Moodle Moodle	Version 2.1.5
Moodle Moodle	Version 2.1.6
Moodle Moodle	Version 2.1.7
Moodle Moodle	Version 2.1.8
Moodle Moodle	Version 2.1.9

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.2.0
Moodle Moodle	Version 2.2.1
Moodle Moodle	Version 2.2.2
Moodle Moodle	Version 2.2.3
Moodle Moodle	Version 2.2.4
Moodle Moodle	Version 2.2.5
Moodle Moodle	Version 2.2.6
Moodle Moodle	Version 2.2.7
Moodle Moodle	Version 2.2.8
Moodle Moodle	Version 2.2.9

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.3.0
Moodle Moodle	Version 2.3.1
Moodle Moodle	Version 2.3.2
Moodle Moodle	Version 2.3.3
Moodle Moodle	Version 2.3.4
Moodle Moodle	Version 2.3.5
Moodle Moodle	Version 2.3.6