CVE-2013-2083

The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly…

published May 25, 2013

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a certain array-element syntax, which allows remote attackers to bypass intended form-data filtering via a crafted request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02342 · 83.5th percentile
Published
2013-05-25T01:00Z
EPSS history
Timeline
  • 25 MAY 01:00Z
    The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly…
    cvelistv5