moodle -- multiple vulnerabilities

2015-07-0600:00:00

vuxml.freebsd.org

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

EPSS

0.003

Percentile

69.7%

JSON

Marina Glancy reports:

MSA-15-0026: Possible phishing when redirecting to external site
using referer header. (CVE-2015-3272)
MSA-15-0027: Capability ‘mod/forum:canposttomygroups’ is not
respected when using ‘Post a copy to all groups’ in forum
(CVE-2015-3273)
MSA-15-0028: Possible XSS through custom text profile fields in Web
Services (CVE-2015-3274)
MSA-15-0029: Javascript injection in SCORM module (CVE-2015-3275)

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmoodle27< 2.7.9UNKNOWN
FreeBSDanynoarchmoodle28< 2.8.7UNKNOWN
FreeBSDanynoarchmoodle29< 2.9.1UNKNOWN