CVE-2015-0213 | BDVDB-2026-69667 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48106
http://openwall.com/lists/oss-security/2015/01/19/1
https://moodle.org/mod/forum/discuss.php?d=278613

Exploit#

No public exploit known

History#

Version 12015-06-01Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.