Description

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims.

Remediation

References

CVE-2015-0213

Related Vulnerabilities

phpBB Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2018-19274)

Moodle Improper Authentication Vulnerability (CVE-2014-3552)

Moodle Uncontrolled Resource Consumption Vulnerability (CVE-2021-20185)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5612)

PHP Improper Input Validation Vulnerability (CVE-2015-4598)

Severity

Medium

Classification

CVE-2015-0213 CWE-352

Tags

Missing Update Known Vulnerabilities