Description

Multiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the messaging system in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allow remote attackers to hijack the authentication of arbitrary users for requests that send course messages.

Remediation

References

CVE-2012-6103

Related Vulnerabilities

WordPress Plugin RokNewsPager Multiple Vulnerabilities (1.17)

b2evolution URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-22840)

WordPress Plugin Safe SVG Denial of Service (1.9.4)

WordPress Plugin Easy Contact Form Lite 'sort_row.request.php' SQL Injection (1.0.7)

Apache Traffic Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9515)

Severity

Medium

Classification

CVE-2012-6103 CWE-352

Tags

Missing Update Known Vulnerabilities