Description

lib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated users to bypass intended access restrictions via a modified value of a frozen form field.

Remediation

References

CVE-2012-5472

Related Vulnerabilities

Prototype CVE-2008-7220 Vulnerability (CVE-2008-7220)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5692)

MySQL CVE-2021-2030 Vulnerability (CVE-2021-2030)

WordPress Plugin Frontend File Manager Arbitrary File Upload (3.7)

OpenSSL Key Management Errors Vulnerability (CVE-2018-0732)

Severity

Medium

Classification

CVE-2012-5472 CWE-264

Tags

Missing Update Known Vulnerabilities