Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-12523

Malicious code in bioql PyPI...

8.8CVSS4.9AI score0.00235EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/09/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-3638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF...

8.8CVSS5AI score0.00235EPSS
Exploits0References2
OSV
OSV
added 2025/06/17 5:59 a.m.3 views

BIT-MOODLE-2025-3638 Moodle: csrf risk in brickfield tool's analysis request action

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS6.1AI score0.00235EPSS
Exploits0References4
CNVD
CNVD
added 2025/05/07 12:0 a.m.12 views

Moodle Cross-Site Request Forgery Vulnerability (CNVD-2025-09236)

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from a cross-site request forgery vulnerability that stems from the lack of an anti-cross-site request forgery...

8.8CVSS6.4AI score0.00235EPSS
Exploits0References1
Veracode
Veracode
added 2025/04/29 4:2 a.m.5 views

Cross-Site Request Forgery (CSRF)

moodle/moodle is vulnerable to Cross-site Request Forgery CSRF. The vulnerability is due to the absence of a CSRF token in the analysis request action of the Brickfield tool, allows attackers to forge unauthorized requests on behalf of authenticated users...

8.8CVSS6.5AI score0.00235EPSS
Exploits0References6Affected Software1
Snyk
Snyk
added 2025/04/25 3:31 p.m.1 views

Cross-site Request Forgery (CSRF)

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the analysis request action in the Brickfield tool. An attacker can manipulate the state of the application by sending a crafted request that the server accep...

8.8CVSS6.9AI score0.00235EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/04/25 3:31 p.m.10 views

Moodle has a CSRF risk in Brickfield tool's analysis request action

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS6.7AI score0.00235EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2025/04/25 3:31 p.m.3 views

GHSA-M8QH-HX4C-H9HR Moodle has a CSRF risk in Brickfield tool's analysis request action

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

5.3CVSS9AI score0.00235EPSS
Exploits0References6
NVD
NVD
added 2025/04/25 3:15 p.m.8 views

CVE-2025-3638

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS0.00235EPSS
Exploits0References3
OSV
OSV
added 2025/04/25 3:15 p.m.2 views

CVE-2025-3638

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS7.1AI score0.00235EPSS
Exploits0References3
OSV
OSV
added 2025/04/25 3:15 p.m.0 views

UBUNTU-CVE-2025-3638

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

8.8CVSS5.7AI score0.00235EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/04/25 2:42 p.m.3 views

CVE-2025-3638 Moodle: csrf risk in brickfield tool's analysis request action

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

6.4AI score0.00235EPSS
Exploits0References3
CVE
CVE
added 2025/04/25 2:42 p.m.62 views

CVE-2025-3638

CVE-2025-3638: A CSRF flaw in Moodle’s Brickfield analysis request was reported; the analyze action did not include a required anti-CSRF token, exposing possible forged requests. The CVSS v3.1 base score is 8.8 (HIGH) with network attack vector, no privileges required, user interaction required, ...

8.8CVSS6.4AI score0.00235EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/04/25 2:42 p.m.13 views

CVE-2025-3638 Moodle: csrf risk in brickfield tool's analysis request action

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

0.00235EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/22 1:34 p.m.12 views

CVE-2025-3638

A flaw was found in Moodle. The analysis request action in the Brickfield tool did not include the necessary token to prevent a Cross-site request forgery CSRF risk...

4.6CVSS7.2AI score0.00235EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/04/22 12:0 a.m.2 views

Moodle 跨站请求伪造漏洞

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from a cross-site request forgery vulnerability that stems from the lack of an anti-cross-site request forgery...

8.8CVSS6.7AI score0.00235EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/04/22 12:0 a.m.2 views

PT-2025-17914 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A flaw was found in the analysis request action in the Brickfield tool, which did not include the necessary token to prevent a Cross-site request forgery CSRF risk. Recommendations: At the...

8.8CVSS4.5AI score0.00235EPSS
Exploits0References19
Rows per page
Query Builder