CVE-2010-2231

Опубликовано: 28 июн. 2010

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in report/overview/report.php in the quiz module in Moodle before 1.8.13 and 1.9.x before 1.9.9 allows remote attackers to hijack the authentication of arbitrary users for requests that delete quiz attempts via the attemptid parameter.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия до 1.8.12 (включая)

cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.3.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.4.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.4.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.4.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.5.0:beta:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.5.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.6.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.7.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.8.11:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00536

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVE-2010-2231

ubuntu

почти 15 лет назад

CVE-2010-2231

debian

почти 15 лет назад

Cross-site request forgery (CSRF) vulnerability in report/overview/rep ...

GHSA-x3rw-6g2v-2x72

github

около 3 лет назад

EPSS

Процентиль: 67%

0.00536

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352