Описание
Cross-site request forgery (CSRF) vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage Assignment plugins.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | released | 3.0.3+dfsg-0ubuntu1 |
| cosmic | released | 3.0.3+dfsg-0ubuntu1 |
| devel | released | 3.0.3+dfsg-0ubuntu1 |
| disco | released | 3.0.3+dfsg-0ubuntu1 |
| esm-apps/bionic | released | 3.0.3+dfsg-0ubuntu1 |
| esm-apps/xenial | released | 3.0.3+dfsg-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needs-triage |
Показывать по
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
Cross-site request forgery (CSRF) vulnerability in mod/assign/adminmanageplugins.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote attackers to hijack the authentication of administrators for requests that manage Assignment plugins.
Cross-site request forgery (CSRF) vulnerability in mod/assign/adminman ...
Moodle cross-site request forgery (CSRF) vulnerability
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3