Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:12 a.m.15 views

Moodle cross-site request forgery (CSRF) vulnerability

Cross-site request forgery CSRF vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage...

8.8CVSS7.2AI score0.00097EPSS
Exploits0References11Affected Software1
OSV
OSV
added 2022/05/13 1:12 a.m.11 views

GHSA-F5PM-C4CW-563P Moodle cross-site request forgery (CSRF) vulnerability

Cross-site request forgery CSRF vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage...

8.8CVSS8.8AI score0.00097EPSS
Exploits0References11
Veracode
Veracode
added 2017/07/26 7:42 p.m.18 views

Cross-site Request Forgery (CSRF)

Moodle is vulnerable to cross-site request forgery CSRF attacks. Leveraging a flaw in mod/assign/adminmanageplugins.php, attackers can hijack the authentication of administrators through requests that manage the Assignment plugins...

8.8CVSS8.5AI score0.00097EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2016/05/22 8:59 p.m.11 views

CVE-2016-2157

Cross-site request forgery CSRF vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage...

8.8CVSS8.9AI score0.00097EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2016/05/22 8:59 p.m.23 views

CVE-2016-2157

Cross-site request forgery CSRF vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage...

8.8CVSS7.2AI score0.00097EPSS
Exploits0References2
CVE
CVE
added 2016/05/22 8:0 p.m.50 views

CVE-2016-2157

CVE-2016-2157 is a CSRF vulnerability in Moodle affecting mod/assign/adminmanageplugins.php. It lets remote attackers hijack administrator authentication for requests that manage Assignment plugins. Affected Moodle versions include through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x b...

8.8CVSS8.8AI score0.00097EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder