Description

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allow remote attackers to hijack the authentication of unspecified victims.

Remediation

References

CVE-2015-0213

Related Vulnerabilities

PHP Out-of-bounds Write Vulnerability (CVE-2008-2371)

Oracle Database Server CVE-2008-1821 Vulnerability (CVE-2008-1821)

ownCloud Improper Access Control Vulnerability (CVE-2016-9468)

Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.31)

Jboss EAP Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2017-7536)

Severity

Medium

Classification

CVE-2015-0213 CWE-352

Tags

Missing Update Known Vulnerabilities