Description

lib/ajax/getnavbranch.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3, when the forcelogin feature is enabled, allows remote attackers to obtain sensitive category-detail information from the navigation branch by leveraging the guest role for an Ajax request.

Remediation

References

CVE-2016-2158

Related Vulnerabilities

WordPress Plugin Gallery-Flagallery Photo Portfolio 'flagshow.php' Cross-Site Scripting (1.57)

WordPress Plugin Recip.ly 'uploadImage.php' Arbitrary File Upload (1.1.7)

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-20444)

WordPress Plugin Gravity Forms Infusionsoft Cross-Site Scripting (1.1.4)

Oracle HTTP Server CVE-2021-25219 Vulnerability (CVE-2021-25219)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2016-2158