Описание
Moodle Cross-Site Request Forgery (CSRF)
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.
Пакеты
Наименование
moodle/moodle
composer
Затронутые версииВерсия исправления
>= 3.2, < 3.2.3
3.2.3
Наименование
moodle/moodle
composer
Затронутые версииВерсия исправления
>= 3.1, < 3.1.6
3.1.6
Наименование
moodle/moodle
composer
Затронутые версииВерсия исправления
>= 3.0, < 3.0.10
3.0.10
Наименование
moodle/moodle
composer
Затронутые версииВерсия исправления
>= 2.7, < 2.7.20
2.7.20
Связанные уязвимости
CVSS3: 4.3
ubuntu
около 8 лет назад
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.
CVSS3: 4.3
nvd
около 8 лет назад
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.
CVSS3: 4.3
debian
около 8 лет назад
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers ...