Lucene search
Veracode Vulnerability DatabaseVERACODE:4689HistoryJul 26, 2017 - 3:33 a.m.
Cross-Site Request Forgery(CSRF)
2017-07-2603:33:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.001
Percentile
33.4%
Moodle is vulnerable to cross-site request forgery (CSRF) attacks. The attacks are possible because it does not prevent the attackers to make a trick to the administrator site registration by displaying correct URL and registering to another hub.
Related
cvelist
cvelist
CVE-2015-5335
2016-02-22 02:00:00
ubuntucve
ubuntucve
CVE-2015-5335
2016-02-22 00:00:00
prion
prion
Cross site request forgery (csrf)
2016-02-22 05:59:00
github
github
Moodle cross-site request forgery (CSRF) vulnerability
2022-05-13 01:12:47
osv
osv
Moodle cross-site request forgery (CSRF) vulnerability
2022-05-13 01:12:47
cve
cve
CVE-2015-5335
2016-02-22 05:59:13
nvd
nvd
CVE-2015-5335
2016-02-22 05:59:13
nessus
nessus
Moodle < 2.7.11 / 2.8.x < 2.8.9 / 2.9.x < 2.9.3 Multiple Vulnerabilities
2016-04-08 00:00:00
Fedora 23 : moodle-2.9.3-1.fc23 (2015-98fc0d20ad)
2016-03-04 00:00:00
Fedora 22 : moodle-2.8.9-1.fc22 (2015-2ebdd4ad8f)
2016-03-04 00:00:00
mageia
mageia
Updated moodle packages fix security vulnerability
2015-12-05 13:03:58
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0464)
2015-12-08 00:00:00
Fedora Update for moodle FEDORA-2015-2
2015-12-12 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: moodle-2.8.9-1.fc22
2015-12-12 01:55:37
[SECURITY] Fedora 23 Update: moodle-2.9.3-1.fc23
2015-12-11 23:57:23