CVE-2012-0795

Moodle 1.9.x < 1.9.16, 2.0.x < 2.0.7, 2.1.x < 2.1.4, 2.2.x < 2.2.1 - Authenticated Email Address Validation Bypass

Title source: llm
STIX 2.1

Description

Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail address settings, which allows remote authenticated users to have an unspecified impact via a crafted address.

References (4)

Core 4
Core References
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2012/dsa-2421
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=783532
Vendor Advisory x_refsource_confirm
http://moodle.org/mod/forum/discuss.php?d=194014

Scores

EPSS 0.0061
EPSS Percentile 69.9%

Details

CWE
CWE-20
Status published
Products (27)
moodle/moodle 1.9.1
moodle/moodle 1.9.2
moodle/moodle 1.9.3
moodle/moodle 1.9.4
moodle/moodle 1.9.5
moodle/moodle 1.9.6
moodle/moodle 1.9.7
moodle/moodle 1.9.8
moodle/moodle 1.9.9
moodle/moodle 1.9.10
... and 17 more
Published Jul 17, 2012
Tracked Since Feb 18, 2026