Lucene search
GoogleOSV:GHSA-V33X-Q8GH-4X42HistoryMay 13, 2022 - 1:12 a.m.
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
2022-05-1301:12:48
Google
osv.dev
9
moodle
csrf
vulnerabilities
lesson module
remote attackers
authentication
Multiple cross-site request forgery (CSRF) vulnerabilities in the lesson module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allow remote attackers to hijack the authentication of arbitrary users for requests to (1) mod/lesson/mediafile.php or (2) mod/lesson/view.php.
References
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48109
github.com/moodle/moodle/commit/541c5b8552e0162010d0259c90a04eb63e875958
github.com/moodle/moodle/commit/817cae1ac7ca748ba368439a40ef67d555774485
github.com/moodle/moodle/commit/dcb42c9ed13b0c0ec2dde22b62ef69772d7725e6
github.com/moodle/moodle/commit/f75333766c7295932baa72a9dbe9542baf14e107
moodle.org/mod/forum/discuss.php?d=323233
nvd.nist.gov/vuln/detail/CVE-2015-5338
Related
ubuntucve
ubuntucve
CVE-2015-5338
2016-02-22 00:00:00
nvd
nvd
CVE-2015-5338
2016-02-22 05:59:16
cve
cve
CVE-2015-5338
2016-02-22 05:59:16
cvelist
cvelist
CVE-2015-5338
2016-02-22 02:00:00
github
github
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
2022-05-13 01:12:48
prion
prion
Cross site request forgery (csrf)
2016-02-22 05:59:00
nessus
nessus
Moodle < 2.7.11 / 2.8.x < 2.8.9 / 2.9.x < 2.9.3 Multiple Vulnerabilities
2016-04-08 00:00:00
Fedora 23 : moodle-2.9.3-1.fc23 (2015-98fc0d20ad)
2016-03-04 00:00:00
Fedora 22 : moodle-2.8.9-1.fc22 (2015-2ebdd4ad8f)
2016-03-04 00:00:00
mageia
mageia
Updated moodle packages fix security vulnerability
2015-12-05 13:03:58
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0464)
2015-12-08 00:00:00
Fedora Update for moodle FEDORA-2015-2
2015-12-12 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: moodle-2.8.9-1.fc22
2015-12-12 01:55:37
[SECURITY] Fedora 23 Update: moodle-2.9.3-1.fc23
2015-12-11 23:57:23