Description

The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass intended capability requirements and save questions via a save_question action.

Remediation

References

CVE-2012-2356

Related Vulnerabilities

Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.7)

Atlassian Confluence Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-3398)

PrestaShop CVE-2023-39529 Vulnerability (CVE-2023-39529)

Apache Tomcat Other Vulnerability (CVE-2001-0590)

WordPress Plugin Like Button Rating-LikeBtn Server-Side Request Forgery (2.6.31)

Severity

Medium

Classification

CVE-2012-2356 CWE-264

Tags

Missing Update Known Vulnerabilities