Lucene search
Veracode Vulnerability DatabaseVERACODE:4522HistoryJul 04, 2017 - 8:36 a.m.
Cross-site Request Forgery (CSRF)
2017-07-0408:36:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
EPSS
0.002
Percentile
52.8%
Moodle is vulnerable to cross-site request forgery (CSRF). The library does not properly check the user’s session when sending messages, allowing a malicious user to hijack the authentication of another user for requests that send course messages.
Related
cve
cve
CVE-2012-6103
2013-01-27 22:55:03
ubuntucve
ubuntucve
CVE-2012-6103
2013-01-27 00:00:00
nvd
nvd
CVE-2012-6103
2013-01-27 22:55:03
cvelist
cvelist
CVE-2012-6103
2013-01-27 22:00:00
prion
prion
Cross site request forgery (csrf)
2013-01-27 22:55:00
nessus
nessus
Moodle 2.2.x < 2.2.7 Multiple Vulnerabilities
2016-07-21 00:00:00
Moodle 2.3.x < 2.3.4 Multiple Vulnerabilities
2016-07-21 00:00:00
Moodle 2.4.x < 2.4.1 Multiple Vulnerabilities
2016-07-21 00:00:00