Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/moodle/moodle@2.1.11
Typecomposer
Namespacemoodle
Namemoodle
Version2.1.11
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version2.2.2
Latest_non_vulnerable_version5.1.2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-b2tv-8q9g-qqfz
vulnerability_id VCID-b2tv-8q9g-qqfz
summary 
Improper Input Validation
The MoodleQuickForm class in lib/formslib.php in Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not properly handle a certain array-element syntax, which allows remote attackers to bypass intended form-data filtering via a crafted request.
references
0
reference_url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38885
reference_id
reference_type
scores
url http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-38885
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html
3
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html
4
reference_url http://openwall.com/lists/oss-security/2013/05/21/1
reference_id
reference_type
scores
url http://openwall.com/lists/oss-security/2013/05/21/1
5
reference_url https://moodle.org/mod/forum/discuss.php?d=228935
reference_id
reference_type
scores
url https://moodle.org/mod/forum/discuss.php?d=228935
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-2083
reference_id CVE-2013-2083
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2013-2083
7
reference_url https://github.com/advisories/GHSA-m63h-q4x3-6hwj
reference_id GHSA-m63h-q4x3-6hwj
reference_type
scores
url https://github.com/advisories/GHSA-m63h-q4x3-6hwj
fixed_packages
0
url pkg:composer/moodle/moodle@2.1.11
purl pkg:composer/moodle/moodle@2.1.11
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.1.11
1
url pkg:composer/moodle/moodle@2.2.10
purl pkg:composer/moodle/moodle@2.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-qgn8-zs2m-vkc4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.2.10
2
url pkg:composer/moodle/moodle@2.3.7
purl pkg:composer/moodle/moodle@2.3.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.3.7
3
url pkg:composer/moodle/moodle@2.4.4
purl pkg:composer/moodle/moodle@2.4.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.4
aliases CVE-2013-2083, GHSA-m63h-q4x3-6hwj
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b2tv-8q9g-qqfz
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.1.11