Поиск уязвимостей
Количество 9
Количество 9
BDU:2022-07405
Уязвимость системы управления курсами Moodle, связанная с недостаточной проверкой источника HTTP-запроса в URL-адресе перенаправления курса, позволяющая нарушителю выполнять атаки с подделкой межсайтовых запросов
ROS-20221222-03
Множественные уязвимости moodle
CVE-2022-45149
A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user's CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.
CVE-2022-45149
A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user's CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks.
CVE-2022-45149
A vulnerability was found in Moodle which exists due to insufficient v ...
GHSA-8v23-w4w5-w83c
Cross-Site Request Forgery in Moodle
ALT-PU-2023-2057
ALT-PU-2023-2057: package `moodle` update to version 3.11.15-alt1
ALT-PU-2023-2012
ALT-PU-2023-2012: package `moodle` update to version 3.11.15-alt1
ALT-PU-2020-3235
ALT-PU-2020-3235: package `moodle` update to version 3.10.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-07405 Уязвимость системы управления курсами Moodle, связанная с недостаточной проверкой источника HTTP-запроса в URL-адресе перенаправления курса, позволяющая нарушителю выполнять атаки с подделкой межсайтовых запросов | CVSS3: 5.4 | 0% Низкий | почти 4 года назад |
 | ROS-20221222-03 Множественные уязвимости moodle | CVSS3: 9.1 | почти 4 года назад | |
 | CVE-2022-45149 A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user's CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks. | CVSS3: 5.4 | 0% Низкий | почти 4 года назад |
 | CVE-2022-45149 A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. A user's CSRF token was unnecessarily included in the URL when being redirected to a course they have just restored. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website. This flaw allows an attacker to perform cross-site request forgery attacks. | CVSS3: 5.4 | 0% Низкий | почти 4 года назад |
| CVE-2022-45149 A vulnerability was found in Moodle which exists due to insufficient v ... | CVSS3: 5.4 | 0% Низкий | почти 4 года назад |
| GHSA-8v23-w4w5-w83c Cross-Site Request Forgery in Moodle | CVSS3: 5.4 | 0% Низкий | почти 4 года назад |
| ALT-PU-2023-2057 ALT-PU-2023-2057: package `moodle` update to version 3.11.15-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2023-2012 ALT-PU-2023-2012: package `moodle` update to version 3.11.15-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2020-3235 ALT-PU-2020-3235: package `moodle` update to version 3.10.0-alt1 | CVSS3: 9.8 | около 6 лет назад |
Уязвимостей на страницу