Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-2986

Опубликовано: 06 окт. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 8.8

Описание

Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
esm-apps-legacy/xenial

needs-triage

esm-apps/bionic

needs-triage

esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra/focal

DNE

focal

DNE

jammy

DNE

trusty

ignored

end of standard support
upstream

needs-triage

xenial

ignored

end of standard support

Показывать по

Ссылки на источники

EPSS

Процентиль: 41%
0.00467
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
около 4 лет назад

Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk.

CVSS3: 8.8
debian
около 4 лет назад

Enabling and disabling installed H5P libraries did not include the nec ...

CVSS3: 8.8
github
около 4 лет назад

Moodle Cross-Site Request Forgery (CSRF)

CVSS3: 9.8
altlinux
больше 3 лет назад

ALT-PU-2023-2057: package `moodle` update to version 3.11.15-alt1

CVSS3: 9.8
altlinux
больше 3 лет назад

ALT-PU-2023-2012: package `moodle` update to version 3.11.15-alt1

EPSS

Процентиль: 41%
0.00467
Низкий

8.8 High

CVSS3