Description

Multiple cross-site request forgery (CSRF) vulnerabilities in mod/assign/locallib.php in the Assignment subsystem in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 allow remote attackers to hijack the authentication of teachers for quick-grading requests.

Remediation

References

CVE-2014-0213

Related Vulnerabilities

Drupal Core Security Bypass (8.0.0 - 9.1.15)

Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27493)

Apache Traffic Server Remote DOS Attack (CVE-2021-27737)

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2018-10237)

Ruby on Rails Improper Input Validation Vulnerability (CVE-2016-2098)

Severity

Medium

Classification

CVE-2014-0213 CWE-352

Tags

Missing Update Known Vulnerabilities