Description

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.

Remediation

References

CVE-2017-7491

Related Vulnerabilities

Magento Violation of Secure Design Principles Vulnerability (CVE-2021-28583)

WordPress Plugin Ultimate Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (1.29.2)

Dot CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-11466)

MySQL CVE-2016-5625 Vulnerability (CVE-2016-5625)

WordPress Plugin Fancy Gallery 'image-upload.php' Arbitrary File Upload (1.2.4)

Severity

Medium

Classification

CVE-2017-7491 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities