Lucene search
Ubuntu.comUB:CVE-2012-6103HistoryJan 27, 2013 - 12:00 a.m.
CVE-2012-6103
2013-01-2700:00:00
ubuntu.com
ubuntu.com
11
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.002
Percentile
52.8%
Multiple cross-site request forgery (CSRF) vulnerabilities in
user/messageselect.php in the messaging system in Moodle 2.2.x before
2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to
hijack the authentication of arbitrary users for requests that send course
messages.
Related
cve
cve
CVE-2012-6103
2013-01-27 22:55:03
veracode
veracode
Cross-site Request Forgery (CSRF)
2017-07-04 08:36:10
nvd
nvd
CVE-2012-6103
2013-01-27 22:55:03
cvelist
cvelist
CVE-2012-6103
2013-01-27 22:00:00
prion
prion
Cross site request forgery (csrf)
2013-01-27 22:55:00
nessus
nessus
Moodle 2.2.x < 2.2.7 Multiple Vulnerabilities
2016-07-21 00:00:00
Moodle 2.3.x < 2.3.4 Multiple Vulnerabilities
2016-07-21 00:00:00
Moodle 2.4.x < 2.4.1 Multiple Vulnerabilities
2016-07-21 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.002
Percentile
52.8%
Related for UB:CVE-2012-6103