Lucene search
Veracode Vulnerability DatabaseVERACODE:40009HistoryMar 31, 2023 - 6:18 a.m.
Cross-Site Request Forgery (CSRF)
2023-03-3106:18:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
cross-site request forgery
csrf
vulnerability
resetalltemplates
action_bar.php
validation
sensitive information
database activity templates
moodle
0.001 Low
EPSS
Percentile
26.7%
moodle is vulnerable to Cross-Site Request Forgery (CSRF). The vulnerability exists in the resetalltemplates parameter of action_bar.php because the CSRF token was not properly validated, which allows an attacker to access sensitive information and reset all the database activity templates.
| CPE | Name | Operator | Version |
|---|---|---|---|
| moodle/moodle | le | v4.1.1 | |
| moodle/moodle | le | v4.1.1 |
Related
cve
cve
CVE-2023-28335
2023-03-23 21:15:20
osv
osv
CVE-2023-28335
2023-03-23 21:15:20
Moodle vulnerable to Cross-site Request Forgery
2023-03-23 21:30:18
BIT-moodle-2023-28335
2024-03-06 10:59:55
prion
prion
Cross site request forgery (csrf)
2023-03-23 21:15:00
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2023-28335
2023-03-23 00:00:00
nvd
nvd
CVE-2023-28335
2023-03-23 21:15:20
github
github
Moodle vulnerable to Cross-site Request Forgery
2023-03-23 21:30:18
openvas
openvas
Moodle 4.1 < 4.1.2 Multiple Vulnerabilities
2023-03-24 00:00:00