A flaw in Moodle before versions 3.7.1, 3.6.5, 3.5.7 allows CSRF attacks via XML admin tool
Reporter | Title | Published | Views | Family All 9 |
---|---|---|---|---|
![]() | CVE-2019-10186 | 31 Jul 201922:15 | – | osv |
![]() | Moodle CSRF Vulnerability | 24 May 202216:52 | – | osv |
![]() | Moodle CSRF Vulnerability | 24 May 202216:52 | – | github |
![]() | CVE-2019-10186 | 31 Jul 201900:00 | – | ubuntucve |
![]() | CVE-2019-10186 | 31 Jul 201922:15 | – | nvd |
![]() | Cross site request forgery (csrf) | 31 Jul 201922:15 | – | prion |
![]() | CVE-2019-10186 | 31 Jul 201921:40 | – | cvelist |
![]() | Cross-site Scripting (XSS) | 1 Aug 201911:33 | – | veracode |
![]() | Moodle < 3.5.7, 3.6.x < 3.6.5, 3.7.x < 3.7.1 Multiple Vulnerabilities | 6 Aug 201900:00 | – | openvas |
[
{
"product": "moodle",
"vendor": "The Moodle Project",
"versions": [
{
"status": "affected",
"version": "3.7.1"
},
{
"status": "affected",
"version": "3.6.5"
},
{
"status": "affected",
"version": "3.5.7"
}
]
}
]
Source | Link |
---|---|
bugzilla | www.bugzilla.redhat.com/show_bug.cgi |
moodle | www.moodle.org/mod/forum/discuss.php |
securityfocus | www.securityfocus.com/bid/109175 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo