Description

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims.

Remediation

References

CVE-2015-0213

Related Vulnerabilities

WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Cross-Site Request Forgery (4.0.9)

MongoDb Improper Input Validation Vulnerability (CVE-2021-20330)

Osclass Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5163)

Oracle HTTP Server CVE-2013-1862 Vulnerability (CVE-2013-1862)

Oracle JRE CVE-2022-21282 Vulnerability (CVE-2022-21282)

Severity

Medium

Classification

CVE-2015-0213 CWE-352

Tags

Missing Update Known Vulnerabilities