Lucene search
Veracode Vulnerability DatabaseVERACODE:4774HistoryJul 28, 2017 - 4:40 a.m.
Cross-site Request Forgery (CSRF)
2017-07-2804:40:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
EPSS
0.002
Percentile
52.7%
Moodle is vulnerable to cross-site request forgery (CSRF) attacks. The application does not check the session key in mod/lti/request_tool.php and mod/lti/instructor_edit_tool_type.php, allowing a malicious user to hijack authentication of an arbitrary user.
Related
github
github
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
2022-05-13 01:12:43
prion
prion
Cross site request forgery (csrf)
2014-11-24 11:59:00
ubuntucve
ubuntucve
CVE-2014-7836
2014-11-24 00:00:00
osv
osv
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
2022-05-13 01:12:43
cvelist
cvelist
CVE-2014-7836
2014-11-24 11:00:00
nvd
nvd
CVE-2014-7836
2014-11-24 11:59:06
cve
cve
CVE-2014-7836
2014-11-24 11:59:06
nessus
nessus
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0483)
2022-01-28 00:00:00
mageia
mageia
Updated moodle package fixes security vulnerabilities
2014-11-22 13:54:50