|Topic:||Box.net repository has security flaws|
|Versions affected:||< 2.1.2, < 2.0.5 (1.9.x not affected)|
|Reported by:||Alex Willen|
|Solution:||upgrade to latest version|
|Workaround:||Disable the Box.net repository|
The Box.net plugin was created before Box.net released an OAuth-like authentication, which requires a user to enter their username and password in moodle site.