Lucene search
RedhatCVELIST:CVE-2014-7846HistoryNov 24, 2014 - 11:00 a.m.
CVE-2014-7846
2014-11-2411:00:00
redhat
www.cve.org
3
tag/tag_autocomplete.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not consider the moodle/tag:edit capability before adding a tag, which allows remote authenticated users to bypass intended access restrictions via an AJAX request.
Related
cve
cve
CVE-2014-7846
2014-11-24 11:59:11
github
github
Moodle does not consider the moodle/tag:edit capability before adding a tag
2022-05-13 01:12:43
veracode
veracode
Bypass Access Restrictions
2017-07-26 09:22:19
osv
osv
Moodle does not consider the moodle/tag:edit capability before adding a tag
2022-05-13 01:12:43
prion
prion
Cross site request forgery (csrf)
2014-11-24 11:59:00
ubuntucve
ubuntucve
CVE-2014-7846
2014-11-24 00:00:00
nvd
nvd
CVE-2014-7846
2014-11-24 11:59:11
nessus
nessus
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0483)
2022-01-28 00:00:00
mageia
mageia
Updated moodle package fixes security vulnerabilities
2014-11-22 13:54:50