Description

Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data.

Remediation

References

CVE-2011-4298

Related Vulnerabilities

WordPress Plugin WP Project Manager-Task, team, and project management featuring kanban board and gantt charts Cross-Site Scripting (2.4.13)

Apache Tomcat Insufficient Verification of Data Authenticity Vulnerability (CVE-2017-7674)

WordPress Plugin WordPress Appointment Schedule Booking System Cross-Site Scripting (1.0)

Drupal Configuration Vulnerability (CVE-2008-6171)

WordPress Plugin WP-reCAPTCHA Cross-Site Scripting (3.1.3)

Severity

Medium

Classification

CVE-2011-4298 CWE-352

Tags

Missing Update Known Vulnerabilities