CVE ID:	CVE-2013-2081
Description:	Moodle through 2.1.10, 2.2.x before 2.2.10, 2.3.x before 2.3.7, and 2.4.x before 2.4.4 does not consider "don't send" attributes during hub registration, which allows remote hubs to obtain sensitive site information by reading form data.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-2081 FEDORA-2013-8668 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/107026.html FEDORA-2013-8692 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106988.html FEDORA-2013-8702 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106965.html [oss-security] 20130521 Moodle security notifications public http://openwall.com/lists/oss-security/2013/05/21/1 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37822 http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-37822 https://moodle.org/mod/forum/discuss.php?d=228933 https://moodle.org/mod/forum/discuss.php?d=228933