Lucene search
+L

20 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-12523

Malicious code in bioql PyPI...

8.8CVSS4.9AI score0.00291EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/09/04 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2025-3638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF...

8.8CVSS5.5AI score0.00291EPSS
SaveExploits0References2
OSV
OSV
•added 2025/06/17 5:59 a.m.•18 views

BIT-MOODLE-2025-3638 Moodle: csrf risk in brickfield tool's analysis request action

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS6.1AI score0.00291EPSS
SaveExploits0References4
CNVD
CNVD
•added 2025/05/07 12:00 a.m.•33 views

Moodle Cross-Site Request Forgery Vulnerability (CNVD-2025-09236)

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from a cross-site request forgery vulnerability that stems from the lack of an anti-cross-site request forgery...

8.8CVSS6.4AI score0.00291EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/30 12:00 a.m.•17 views

The vulnerability of the Brickfield component in the virtual learning environment Moodle, which allows a perpetrator to influence the integrity of the protected information

The vulnerability of the Brickfield component in the Moodle virtual learning environment is related to the manipulation of cross-site requests. Exploiting this vulnerability can allow a malicious actor to influence the integrity of the protected information...

4CVSS5.2AI score0.00291EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
•added 2025/04/29 4:02 a.m.•17 views

Cross-Site Request Forgery (CSRF)

moodle/moodle is vulnerable to Cross-site Request Forgery CSRF. The vulnerability is due to the absence of a CSRF token in the analysis request action of the Brickfield tool, allows attackers to forge unauthorized requests on behalf of authenticated users...

8.8CVSS6.5AI score0.00291EPSS
SaveExploits0References6Affected Software1
Snyk
Snyk
•added 2025/04/25 3:31 p.m.•7 views

Cross-site Request Forgery (CSRF)

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the analysis request action in the Brickfield tool. An attacker can manipulate the state of the application by sending a crafted request that the server accep...

8.8CVSS6.9AI score0.00291EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/04/25 3:31 p.m.•23 views

Moodle has a CSRF risk in Brickfield tool's analysis request action

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS6.7AI score0.00291EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2025/04/25 3:31 p.m.•7 views

GHSA-M8QH-HX4C-H9HR Moodle has a CSRF risk in Brickfield tool's analysis request action

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

5.3CVSS9AI score0.00291EPSS
SaveExploits0References6
NVD
NVD
•added 2025/04/25 3:15 p.m.•15 views

CVE-2025-3638

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS0.00291EPSS
SaveExploits0References3
OSV
OSV
•added 2025/04/25 3:15 p.m.•13 views

UBUNTU-CVE-2025-3638

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS5.7AI score0.00291EPSS
SaveExploits0References5
CVE
CVE
•added 2025/04/25 2:42 p.m.•103 views

CVE-2025-3638

A Cross-site request forgery (CSRF) vulnerability exists in Moodle due to the analysis request action in the Brickfield tool failing to include a required security token. This flaw affects several versions, including 4.1.x prior to 4.1.18 , 4.3.x prior to 4.3.12 , 4.4.x prior to 4.4.8 , and 4.5.x...

8.8CVSS6.4AI score0.00291EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2025/04/25 2:42 p.m.•34 views

CVE-2025-3638 Moodle: csrf risk in brickfield tool's analysis request action

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

0.00291EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/04/25 2:42 p.m.•9 views

CVE-2025-3638 Moodle: csrf risk in brickfield tool's analysis request action

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

6.4AI score0.00291EPSS
SaveExploits0References3
OSV
OSV
•added 2025/04/25 2:42 p.m.•13 views

CVE-2025-3638 Moodle: csrf risk in brickfield tool's analysis request action

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS5.9AI score
SaveExploits0References6
Mend
Mend
•added 2025/04/25 2:42 p.m.•3 views

CVE-2025-3638

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS0.00291EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/25 12:00 a.m.•0 views

CVE-2025-3638: Cross-Site Request Forgery (CSRF)

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS5.5AI score0.00291EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/22 1:34 p.m.•21 views

CVE-2025-3638

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

4.6CVSS7.2AI score0.00291EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/22 12:00 a.m.•10 views

PT-2025-17914

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw was found in the analysis request action in the Brickfield tool, which did not include the necessary token to prevent a Cross-site request forgery CSRF risk. Recommendations At the...

8.8CVSS4.5AI score0.00291EPSS
SaveExploits0References20
CNNVD
CNNVD
•added 2025/04/22 12:00 a.m.•21 views

Moodle 跨站请求伪造漏洞

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from a cross-site request forgery vulnerability that stems from the lack of an anti-cross-site request forgery...

8.8CVSS6.7AI score0.00291EPSS
SaveExploits0References3
Rows per page
Query Builder