CVE-2015-3175

Опубликовано: 01 июн. 2015

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving an error page that links to a URL from an HTTP Referer header.

Комментарий

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия до 2.5.9 (включая)

cpe:2.3:a:moodle:moodle:2.5.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.5.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.9:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.6.10:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.004

Низкий

5.8 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2015-3175

ubuntu

около 10 лет назад

CVE-2015-3175

debian

около 10 лет назад

Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x ...

GHSA-h798-h7ff-93xv

github

около 3 лет назад

Moodle Arbitrary Redirect

BDU:2015-10888

fstec

около 10 лет назад

Уязвимость системы управления обучением Мoodle, позволяющая нарушителю проводить фишинговые атаки

EPSS

Процентиль: 60%

0.004

Низкий

5.8 Medium

CVSS2

Дефекты

NVD-CWE-Other