GHSA-4wvg-7886-83gv
Suggest an improvement- Source
- https://github.com/advisories/GHSA-4wvg-7886-83gv
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-4wvg-7886-83gv/GHSA-4wvg-7886-83gv.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-4wvg-7886-83gv
- Aliases
-
- CVE-2014-0126
- Published
- 2022-05-13T01:12:51Z
- Modified
- 2024-12-07T05:39:35.120408Z
- Summary
- Moodle cross-site request forgery (CSRF) vulnerability
- Details
-
Cross-site request forgery (CSRF) vulnerability in enrol/imsenterprise/importnow.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that import an IMS Enterprise file.
- Database specific
{ "nvd_published_at": "2014-03-24T14:20:00Z", "cwe_ids": [ "CWE-352" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-01-24T16:18:04Z" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2014-0126
- https://github.com/moodle/moodle/commit/41a19bffeef0ee6b0560a5ff808fd4bd35075fa1
- https://github.com/moodle/moodle/commit/caf766507771e07c1752ece1f37a32b2b4f6d8b9
- https://github.com/moodle/moodle/commit/ea8647b39ec9cf1d73e04b05559bd12d97aa5229
- https://github.com/moodle/moodle/commit/eee61675f042a9ec89f8f6d219b4ded010198fe4
- https://github.com/moodle/moodle
- https://moodle.org/mod/forum/discuss.php?d=256423
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-43146
- http://openwall.com/lists/oss-security/2014/03/17/1
Affected packages
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle
Packagist / moodle/moodle
Package
- Name
- moodle/moodle
- Purl
- pkg:composer/moodle/moodle