Moderate severityNVD Advisory· Published Mar 24, 2014· Updated Jun 17, 2026

CVE-2014-2572

Description

mod/assign/externallib.php in Moodle 2.6.x before 2.6.2 does not properly handle assignment web-service parameters, which might allow remote authenticated users to modify grade metadata via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
moodle/moodlePackagist	>= 2.6.0, < 2.6.2	2.6.2

Affected products

Moodle/Moodle2 versions
cpe:2.3:a:moodle:moodle:2.6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:moodle:moodle:2.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:moodle:moodle:2.6.1:*:*:*:*:*:*:*
ghsa-coords
pkg:composer/moodle/moodle
Range: >= 2.6.0, < 2.6.2

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-267j-cwvg-j28cghsaADVISORY
moodle.org/mod/forum/discuss.phpnvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2014-2572ghsaADVISORY
openwall.com/lists/oss-security/2014/03/17/1nvdWEB
github.com/moodle/moodle/commit/695a18b6aa9661f812a1a745a888df5acdbd7bc6ghsaWEB
github.com/moodle/moodle/commit/f96b8a1c67f4a106fb7fa78b4338f3c35973f1daghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000