Описание
Cross-Site Request Forgery in Moodle
Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.
Пакеты
Наименование
moodle/moodle
composer
Затронутые версииВерсия исправления
< 3.7.2
3.7.2
Связанные уязвимости
CVSS3: 6.5
ubuntu
больше 6 лет назад
Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.
CVSS3: 6.5
nvd
больше 6 лет назад
Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.
CVSS3: 6.5
debian
больше 6 лет назад
Moodle before version 3.7.2 is vulnerable to information exposure of s ...
CVSS3: 6.5
altlinux
около 7 лет назад
ALT-PU-2019-2681: package `moodle` update to version 3.7.2-alt1