CVE-2014-2572: Moodle

Medium severity, CVSS 4.0. EPSS: 1.1% chance of exploitation in the next 30 days.

mod/assign/externallib.php in Moodle 2.6.x before 2.6.2 does not properly handle assignment web-service parameters, which might allow remote authenticated users to modify grade metadata via unspecified vectors.

Affected products

• Moodle Moodle: version 2.6.0 only; version 2.6.1 only

Published 2014-03-24. Last modified 2026-06-17.