| Topic: | Box.net repository has security flaws |
| Severity: | Serious |
| Versions affected: | < 2.1.2, < 2.0.5 (1.9.x not affected) |
| Reported by: | Alex Willen |
| Issue no.: | MDL-27289 |
| Solution: | upgrade to latest version |
| Changes (master): | http://git.moodle.org/gw?p=moodle.git;a=commit;h=3deff6c9d2bb4ab3144b3ca7b93d6a2ef6a87af2 |
| Workaround: | Disable the Box.net repository |
Description:
The Box.net plugin was created before Box.net released an OAuth-like authentication, which requires a user to enter their username and password in moodle site.