CVE-2011-4298 in Moodle

Resumen (Inglés)

Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack the authentication of arbitrary users for requests that modify wiki data.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2011-11-04

Divulgación

2012-07-11

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
61234	Moodle falsificación de solicitudes en sitios cruzados	352	No está definido	Arreglo oficial	CVE-2011-4298

Fuentes

• MITRE
• NVD
• CVE Details