CVE-2014-7836 in Moodle
摘要 (英语)
Multiple cross-site request forgery (CSRF) vulnerabilities in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for a (1) mod/lti/request_tool.php or (2) mod/lti/instructor_edit_tool_type.php request.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
预定
2014-10-03
披露
2014-11-24
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 72969 | Moodle 跨网站请求伪造 | 352 | 未定义 | 官方修复 | CVE-2014-7836 |