Lucene search
GoogleOSV:GHSA-HHQ7-JF2P-HW9CHistoryMay 13, 2022 - 1:12 a.m.
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
2022-05-1301:12:43
Google
osv.dev
2
moodle
csrf
vulnerabilities
glossary module
remote attackers
authentication
Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims.
References
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48106
openwall.com/lists/oss-security/2015/01/19/1
github.com/moodle/moodle
github.com/moodle/moodle/commit/5770e5147838aa06a3ecdff6fc3aebbbd17fff90
github.com/moodle/moodle/commit/c4250ef4f23776ff4862d2860b6be2cf7b2d85f6
github.com/moodle/moodle/commit/e83c756f84e16ab70e160e08deb84e9bc4bfbfea
moodle.org/mod/forum/discuss.php?d=278613
nvd.nist.gov/vuln/detail/CVE-2015-0213
Related
cvelist
cvelist
CVE-2015-0213
2015-06-01 19:00:00
ubuntucve
ubuntucve
CVE-2015-0213
2015-06-01 00:00:00
veracode
veracode
Cross-Site Request Forgery (CSRF)
2017-07-27 01:45:02
nvd
nvd
CVE-2015-0213
2015-06-01 19:59:02
github
github
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
2022-05-13 01:12:43
prion
prion
Cross site request forgery (csrf)
2015-06-01 19:59:00
cve
cve
CVE-2015-0213
2015-06-01 19:59:02
nessus
nessus
Moodle < 2.6 / 2.6.x < 2.6.7 / 2.7.x < 2.7.4 / 2.8.x < 2.8.2 Multiple Vulnerabilities
2015-04-21 00:00:00
Fedora 21 : moodle-2.7.5-1.fc21 (2015-1751)
2015-02-16 00:00:00
mageia
mageia
Updated moodle package fixes security vulnerabilities
2015-01-20 17:57:33
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0032)
2022-01-28 00:00:00
Fedora Update for moodle FEDORA-2015-1751
2015-02-15 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: moodle-2.7.5-1.fc21
2015-02-15 03:24:22