Lucene search

PRIOn knowledge basePRION:CVE-2011-4133

HistoryJul 16, 2012 - 10:28 a.m.

Cross site request forgery (csrf)

2012-07-1610:28:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.4%

JSON

Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests that modify an RSS feed in an RSS block.

CPENameOperatorVersion
moodleeq1.9.4
moodleeq1.9.1
moodleeq1.9.6
moodleeq1.9.9
moodleeq1.9.2
moodleeq1.9.10
moodleeq1.9.3
moodleeq1.9.5
moodleeq1.9.8
moodleeq1.9.7

Name	Operator	Version
moodle	eq	1.9.4
moodle	eq	1.9.1
moodle	eq	1.9.6
moodle	eq	1.9.9
moodle	eq	1.9.2
moodle	eq	1.9.10
moodle	eq	1.9.3
moodle	eq	1.9.5
moodle	eq	1.9.8
moodle	eq	1.9.7

References

git.moodle.org/gw?p=moodle.git;a=commit;h=8f031d5431c1204197b1482fd6c63bc87a19a476

moodle.org/mod/forum/discuss.php?d=170002

openwall.com/lists/oss-security/2011/11/14/1

7.6 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.4%

JSON

Related for PRION:CVE-2011-4133