Lucene search
HistoryJan 27, 2013 - 10:55 p.m.
CVE-2012-6103
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
52.8%
Multiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the messaging system in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to hijack the authentication of arbitrary users for requests that send course messages.
Affected configurations
Node
moodlemoodleMatch2.2.0
ORmoodlemoodleMatch2.2.1
ORmoodlemoodleMatch2.2.2
ORmoodlemoodleMatch2.2.3
ORmoodlemoodleMatch2.2.4
ORmoodlemoodleMatch2.2.5
ORmoodlemoodleMatch2.2.6
Node
moodlemoodleMatch2.3.0
ORmoodlemoodleMatch2.3.1
ORmoodlemoodleMatch2.3.2
ORmoodlemoodleMatch2.3.3
Node
moodlemoodleMatch2.4.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| moodle | moodle | 2.2.0 | cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.1 | cpe:2.3:a:moodle:moodle:2.2.1:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.2 | cpe:2.3:a:moodle:moodle:2.2.2:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.3 | cpe:2.3:a:moodle:moodle:2.2.3:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.4 | cpe:2.3:a:moodle:moodle:2.2.4:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.5 | cpe:2.3:a:moodle:moodle:2.2.5:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.6 | cpe:2.3:a:moodle:moodle:2.2.6:*:*:*:*:*:*:* |
| moodle | moodle | 2.3.0 | cpe:2.3:a:moodle:moodle:2.3.0:*:*:*:*:*:*:* |
| moodle | moodle | 2.3.1 | cpe:2.3:a:moodle:moodle:2.3.1:*:*:*:*:*:*:* |
| moodle | moodle | 2.3.2 | cpe:2.3:a:moodle:moodle:2.3.2:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2012-6103
2013-01-27 22:55:03
ubuntucve
ubuntucve
CVE-2012-6103
2013-01-27 00:00:00
veracode
veracode
Cross-site Request Forgery (CSRF)
2017-07-04 08:36:10
cvelist
cvelist
CVE-2012-6103
2013-01-27 22:00:00
prion
prion
Cross site request forgery (csrf)
2013-01-27 22:55:00
nessus
nessus
Moodle 2.2.x < 2.2.7 Multiple Vulnerabilities
2016-07-21 00:00:00
Moodle 2.3.x < 2.3.4 Multiple Vulnerabilities
2016-07-21 00:00:00
Moodle 2.4.x < 2.4.1 Multiple Vulnerabilities
2016-07-21 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
52.8%
Related for NVD:CVE-2012-6103